2. Content Area 2: IT Governance (15%) To provide assurance that the organization has the structure, policies, accountability, mechanisms, and monitoring practices in place to achieve the requirements of corporate governance of IT.

3. Content Area 3: Systems and Infrastructure Lifecycle (16%)To provide assurance that the management practices for the development/acquisition, testing, implementation, maintenance, and disposal of systems and infrastructure will meet the organization’s objectives.

4. Content Area 4: IT Service Delivery and Support (14%)To provide assurance that the IT service management practices will ensure the delivery of the level of services required to meet the organization’s objectives.

5. Content Area 5: Protection of Information Assets (31%)To provide assurance that the security architecture (policies, standards, procedures, and controls) ensures the confidentiality, integrity, and availability of information assets.

6. Content Area 6: Business Continuity and Disaster Recovery (14%)To provide assurance that in the event of a disruption the business continuity and disaster recovery processes will ensure the timely resumption of IT services while minimizing the business impact.