IT Examiner School - Oct 2023

Internal Use Only

Decision Factor M2, Supporting Procedure #4

M.2. The ability of management to provide information reports necessary for informed planning and decision making in an effective and efficient manner. Refer to Core Analysis Procedure #4. Click here to enter comment Strong ☐ Satisfactory ☐ Less than satisfactory ☐ Deficient ☐ Critically deficient ☐

33

Internal Use Only

M.3. The adequacy of, and conformance with, internal policies and controls addressing IT operations and risks significant business activities. Refer to Core Analysis Procedure #5. Click here to enter comment Strong ☐ Satisfactory ☐ Less than satisfactory ☐ Deficient ☐ Critically deficient ☒

34