Certified information technology professional

Certified Information Technology Professional (CITP) is a professional certification for professionals in the field of Information Technology. The CITP credential recognizes technical expertise across a wide range of business-technology practice areas.

The credential is given to CPAs only, but different organizations offer these to professionals of varied qualifications. These professionals are expected to be able to assess risk, uncover fraud and perform audits within a business. Most firms that offer these certifications require an unrevoked and valid CPA licence.

Qualifications for the CITP

In some firms, CITP is offered only to those that have completed a formal exam, which includes the five CITP Body of Knowledge areas:

 Risk Assessment
 Fraud Considerations
 Internal Controls & Information Technology General Controls
 Evaluate, Test and Report
 Information Management and Business Intelligence

These main topic areas have a larger field of information behind them; those applying for a qualification need a comprehensive understanding of these disciplines.

In addition, certain certifications and advanced degrees also apply. To be awarded the CITP credential, a CPA must qualify for 100 total points on the application. On the CITP Credential Application you will be asked to sign a Declaration and Intent to comply with all the requirements for CITP recertification. A percentage of CITP applications will be randomly selected for further review each year, and if selected, the applicant agrees to provide detailed documentation (including specifics of Business Experience and Lifelong Learning) to support the assertions of the application.

CITP Body of Knowledge 

Those applying to for a CITP require a breadth of knowledge in the fields listed above. Each main topic has a number of specific outcomes, similar to those found in an educational syllabus. The following data comes from The American Institute of CPAs, an issuer of the CITP certification. The five fields listed above are split into seven, to simplify the understandability of the information.

Technology Strategic Planning
Technology Strategic Planning looks at the understanding of enterprise or business strategy and vision to begin with. This focuses on the business focus and the position of the business in its industry. Technology Strategic Planning also explores the current IT environment of the business processes, as well as assessing risk of the business in IT.

Envisioning future environments as well as assessing strategic IT plans for the business is also a factor that is important in this body of knowledge.

IT Architecture
IT architecture looks at the business' infrastructure, software, people and procedures as well as the data flow. This also looks at the system reliability and management, while understanding protocols, standards and enabling technologies are required as well. Application development environments are core to this topic, looking at database design, data definition, and models of dataflow.

Business Process Enablement
Business Process Enablement looks at more business styled requirements, with stakeholder identification and requirements core to this topic. Business functionality and models paired with risk and business strategy add to the complexity of this topic. The impact of IT on the models of the business is something that is looked at as well, however, this is more to identify the effects of IT on the traditional business process.

System Development, Acquisition, Implementation, and Project Management
System development leads to the identification of technology and its enablement of business processes. Acquisition of systems for commercial usage as well as understanding a software's System Development Life Cycle looks at requirements, risks and models again. System implementation identifies the effects of the software being implemented, while project management assesses the plans and controls of the program being implemented.

Information Systems Management
Information System Management looks at assessing the IT organisation, policies and procedures, while also the operations, effectiveness and efficiencies of the business in its industry. This also assesses asset management, change control and problem management. Financial Control over IT resources looks at performance metrics and IT costs.

Systems Security, Reliability, Audit and Control
Systems Security looks at reliability, controls and evaluation of a particular system in a business. While focusing on cyber security for the software in play in the business, professionals also need to understand privacy issues of the customers of the business. System Audit and Control looks at understanding system controls, testing these controls, and assessing the effectiveness of the controls.

IT Governance & Regulation
Governance establishes risk thresholds for Critical Information Assets as well as establishing broad IT program principles. It also protects stakeholder interests dependent on IT.

This topic also pushes the professional to find and have a broad understanding of federal laws, rules and standards that are present in the business' operation space.

CITP Multiple Entry Point System (MEP) 

To be awarded the CITP Credential, a CPA must accumulate 100 total points. Total points will be earned based on business experience, lifelong learning, and, if required, the results of an examination.

Business Experience Requirement

To be awarded the CITP credential, the candidate must earn a minimum of 25 points for business experience within the five-year period preceding the date of application.
The maximum number of business experience points that can be earned over the preceding five-year period is 60.
40 hours of IT-related business experience equals approximately 1 point.

The final number of points earned in this category will vary depending on the hours of experience and the scope of that experience. Eligible business experience must address the seven practice areas that currently comprise the CITP Body of Knowledge. Academics may count their time lecturing and teaching towards the business experience requirement.

Life Long Learning (LLL)
To be awarded the CITP credential, you must also earn a minimum of 25 points in lifelong learning within the five-year period preceding the date of application. The maximum number of lifelong learning points allowed over a five-year period is 60.

The objectives of the lifelong learning requirement are twofold, to:

Maintain your competency by requiring timely updates of existing technology knowledge and skills
Provide a mechanism for monitoring the maintenance of your competency

The following types of lifelong learning activities are eligible for points:

Continuing Professional Education
Approved courses from an accredited university or college
Other continuing education courses
Trade association conferences
Non-traditional learning methods self-directed reading
Presenting
Authoring
Other credentials designations and certifications, advanced degrees, and committee service

Oversight 

The credential is administered by the AICPA through the National Accreditation Commission via a volunteer committee and dedicated AICPA staff. The committee was formed in 2003 and initially chaired, through 2005, by MICHAEL DICKSON, CPA.CITP. He was succeeded by the current chair, Gregory LaFollette, CPA, CITP. The committee consists of six members each serving staggered three-year terms.

References 

Information technology qualifications