ICSAN MIS study guide
ICSAN MIS · Work through your exam, one topic at a time.
The ICSAN Management Information Systems (MIS) paper is one of the professional examinations set by the Chartered Institute of Secretaries and Administrators of Nigeria (ICSAN) for candidates working towards chartered secretary and administrator status. It is written for governance professionals rather than for software engineers: the emphasis falls on how information systems support corporate objectives, how boards and company secretaries oversee IT risk and controls, and how organisations acquire, run and secure systems. The ICSAN MIS study guide has 10 sections and about 3,433 words.
01Foundations of Information Systems and Their Role in Organisations
This domain tests whether you can distinguish data, information and knowledge, describe the components of an information system, and explain how systems support operational, managerial and strategic work. Expect questions on the management pyramid, information quality and competitive advantage.
373 words, about 2 min02Information Systems Strategy, Governance and Alignment with Corporate Objectives
This domain examines how information systems strategy is derived from corporate strategy and governed so that investment delivers value. Expect questions on IS versus IT strategy, alignment, portfolio management, decision rights, COBIT and benefits realisation.
374 words, about 2 min03Corporate Governance, Risk Management and IT Controls
This domain tests board and management responsibilities for IT, enterprise risk management, internal control and the design of IT general and application controls. Expect COSO, COBIT, the three lines model, segregation of duties and change control.
366 words, about 2 min04Information Systems Development, Acquisition and Project Management
This domain covers the systems development life cycle, agile and hybrid delivery, build-versus-buy decisions, testing, procurement and project control. Expect questions on requirements, user acceptance testing, earned value and change control.
356 words, about 2 min05Business Applications: ERP, CRM, SCM and Enterprise Systems
This domain tests integrated enterprise applications, their modules, process flows and implementation risks. Expect ERP, CRM, SCM, master data, business process reengineering and order-to-cash examples.
348 words, about 2 min06Data Management, Databases and Business Intelligence
This domain covers database design, relational concepts, data quality, warehousing and analytics. Expect keys, normalisation, SQL, ACID, OLTP versus OLAP, ETL and star schemas.
318 words, about 2 min07E-business, Digital Transformation and Emerging Technologies
This domain tests digital business models, transformation, cloud, AI, IoT, blockchain, RPA and the organisational changes behind technology adoption. Expect distinctions between digitisation, digitalisation and digital transformation.
340 words, about 2 min08Information Security, Cybersecurity and Privacy
This domain tests the CIA triad, security controls, identity and access management, incident response and privacy principles. Expect questions on phishing, encryption, least privilege, breach response and data protection law.
323 words, about 2 min09IT Service Management, Operations and Support
This domain tests service management practices, incident and problem management, change and release control, service levels and operational resilience. Expect ITIL 4 terminology and service desk scenarios.
303 words, about 2 min10Professional Ethics, Law and Regulatory Issues in Information Systems
This domain tests ethical judgement, professional codes, confidentiality, conflicts of interest, intellectual property, data protection, computer misuse and records issues. Expect scenarios where legal and ethical duties overlap but are not identical.
332 words, about 2 min