ABOUT THE AUTHORS PETER H. GREGORY, CISA, CISSP, is a career technologist and cybersecurity leader. He is the retired Senior Director of GRC at GCI Communications, where he leads security policy, control frameworks, business continuity, third-party risk management, privacy, information and AI governance, and law enforcement wiretaps. MIKE CHAPPLE, PHD, CISA, CISSP, is a teaching professor of IT, analytics, and operations at the University of Notre Dame. He is a cybersecurity professional and educator with over 25 years experience including as chief information officer of Brand Institute and an information security researcher with the National Security Agency and the U.S. Air Force. Mike is the author of more than 200 books and video courses and provides cybersecurity certification resources at CertMike.com.

• Introduction xiChapter 1 The Audit Process 1Chapter 2 Governance and Management of IT 19Chapter 3 IT Life Cycle Management 37Chapter 4 IT Service Management and Continuity 57Chapter 5 Information Asset Protection 73Practice Test 1 89Practice Test 2 119Appendix 151Index 245

ABOUT THE AUTHORS PETER H. GREGORY, CISA, CISSP, is a career technologist and cybersecurity leader. He is the retired Senior Director of GRC at GCI Communications, where he leads security policy, control frameworks, business continuity, third-party risk management, privacy, information and AI governance, and law enforcement wiretaps. MIKE CHAPPLE, PHD, CISA, CISSP, is a teaching professor of IT, analytics, and operations at the University of Notre Dame. He is a cybersecurity professional and educator with over 25 years experience including as chief information officer of Brand Institute and an information security researcher with the National Security Agency and the U.S. Air Force. Mike is the author of more than 200 books and video courses and provides cybersecurity certification resources at CertMike.com.

• Introduction xiChapter 1 The Audit Process 1Chapter 2 Governance and Management of IT 19Chapter 3 IT Life Cycle Management 37Chapter 4 IT Service Management and Continuity 57Chapter 5 Information Asset Protection 73Practice Test 1 89Practice Test 2 119Appendix 151Index 245