The CITP credential holder possesses a breadth of business and technology experience. The CITP Body of Knowledge represents the qualifying areas of technology knowledge for both business experience and life long learning.  The Body of Knowledge essentially contains the seven areas of services as follows:

1. Technology Strategic Planning
2. IT Architecture
3. Business Process Enablement
4. System Development, Acquisition, Implementation and Project Management
5. Information Systems Management
6. Systems Security, Reliability, Audit and Control
7. IT Governance and Regulation

All CITP professionals should possess a mastery of the following knowledge and skills.

1.)  Technology Strategic Planning

a.      Understand enterprise or business strategy and vision

                                                              i.      Business focus of the entity

                                                             ii.      Position of the entity within its industry

                                                           iii.      Relationship of IT strategy and business strategy

                                                          iv.      Operational dynamics that influence the business

                                                            v.      Business processes as they relate to the strategic plan

                                                          vi.      Internal and external business drivers that impact IT

b.      Assess current IT environment

                                                              i.      Assess current status of the entity's use of IT to support its business processes¹

                                                             ii.      Assess IT risk & opportunity

                                                           iii.      Assess stakeholder attitude

                                                          iv.      Assess stakeholder attitude

c.      Envision future IT environment

                                                              i.      Scan external environment

                                                             ii.      Envision future status of the entity's system

                                                           iii.      Assess the future IT strategy in the context of the entity's business strategy

d.      Assess IT strategic plan

                                                              i.      Assess IT management's goals & objectives

                                                             ii.      Assess overall feasibility and set the scope

                                                           iii.      Identify business constraints

                                                          iv.      Assess action plans and timelines

                                                            v.      Identify the elements of transition

                                                          vi.      Determine process for creating and executing a plan

                                                         vii.      Determine critical success factors

                                                       viii.      Determine appropriate measurements for a given IT strategy

                                                           ix.      Align IT strategic plan with business and IT strategy

                                                            x.      Obtain sponsor and stakeholder approval

Back to top

2.)  IT Architecture

a.      Assess the entity's IT architecture

                                                              i.      Describe Infrastructure—the physical and hardware components of a system

                                                             ii.      Assess Software—the programs and operating software of a system

                                                           iii.      Assess People—the personnel involved in the operation and use of a system

                                                          iv.      Assess Procedures—the programmed and manual procedures involved in the operation of a system

                                                            v.      Assess Data—the information used and supported by a system

b.      Assess current capacities

                                                              i.      Analyze Infrastructure

                                                             ii.      Assess Software

                                                           iii.      Assess People

                                                          iv.      Assess Procedures

c.      Assess Data

                                                              i.      Assess the entity's practices

                                                             ii.      Assess organizational structure

                                                           iii.      Assess IT governance

                                                          iv.      Assess job functions & descriptions

d.      Assess System reliability (see Section 6)

                                                              i.      Assess Training & development

                                                             ii.      Assess Sourcing of IT Architecture Components

e.      Understand protocols, standards, and enabling technologies

                                                              i.      Protocols and standards

                                                             ii.      Enabling technologies

                                                           iii.      Extensible Business Reporting Language (XBRL)

f.       Application development environment

                                                              i.      Understand database architecture

                                                             ii.      Database design

                                                           iii.      Conceptual level of schema

                                                          iv.      Benefits of using a database

                                                            v.      Types of data relationships

                                                          vi.      Implementation models

                                                         vii.      Data definition and data manipulation

Back to top

3.)  Business Process Enablement

a.      Identify stakeholders and assess their requirements

                                                              i.      Identify key business system stakeholders

                                                             ii.      Assess their business system functionality and performance requirements

b.      Understand the entity's business and assess the effectiveness of business processes

                                                              i.      Understand business models

                                                             ii.      Assess the effectiveness of the entity's business processes

c.      Assess the business processes for risks and opportunities

                                                              i.      Align business processes with business strategy

                                                             ii.      Identify and assess barriers and enablers

                                                           iii.      Advise approaches to barriers and enablers

                                                          iv.      Assess procedures to manage changes to business processes

d.      Assess the impact of IT on the entity's business models and processes

                                                              i.      Assess the impact of e-commerce issues

                                                             ii.      Assess the impact of applications of e-commerce

                                                           iii.      Assess the impact of enterprise systems

e.      Assess business processes and advise management on appropriate solutions

4.)   System Development, Acquisition, Implementation, and Project Management

a.      Identify and assess technology enabled business opportunities

                                                              i.      Establish high level business requirements

                                                             ii.      Assess preliminary solution search.

                                                           iii.      Assess business case

b.      Assess system acquisition process for commercially available solutions or service providers

                                                              i.      Assess business requirements

                                                             ii.      Assess vendor selection process

                                                           iii.      Assess product gap analysis

                                                          iv.      Advise optimal solution

c.      Assess systems development life cycle (SDLC) methods and associated tools and techniques

                                                              i.      Understand alternate SDLC models

                                                             ii.      Assess business requirements

                                                           iii.      Assess high-level conceptual design and related investment and risks

                                                          iv.      Understand system modeling tools and techniques

                                                            v.      Assess system design specification

                                                          vi.      Advise optimal development approach

d.      Assess systems implementation processes and techniques²

                                                              i.      Assess system implementation plan

                                                             ii.      Assess acceptance testing approach

                                                           iii.      Assess Data Conversion approach

                                                          iv.      Assess post-implementation review

e.      Assess project management processes

                                                              i.      Assess the project initiation

                                                             ii.      Assess the project plan

                                                           iii.      Assess the ongoing execution of the project plan

                                                          iv.      Assess controls over the project

                                                            v.      Assess completion of the project

                                                          vi.      Understand project management tools and techniques

5.)  Information Systems Management

a.      Assess IT organization

                                                              i.      Assess IT policies, procedures and methodologies that support the entity's strategic plan

                                                             ii.      Assess IT organization related to system components

                                                           iii.      Assess IT human resource policies

                                                          iv.      Advise changes to IT organization and policies

b.      Assess IT operations, effectiveness, and efficiency

                                                              i.      Understand infrastructure and its relationship to applications and user requirements

                                                             ii.      Assess human resources management

                                                           iii.      Assess processes used to maintain organizational efficiencies

                                                          iv.      Assess service provider activities

c.      Assess asset management

                                                              i.      Understand contracts and licenses and understand compliance issues

                                                             ii.      Understand data ownership, security and reliability issues

                                                           iii.      Understand intellectual property issues

                                                          iv.      Understand international issues related to cross-border transportation and storage of data

                                                            v.      Assess provider documentation

                                                          vi.      Assess creation and maintenance of user documentation

                                                         vii.      Assess on-going training and end-user support