You are right litteratuer... but i assumed that he's looking for general I.T. certificates and that's why i suggested the CISA and CISM. With Oracle,and SAP you are more specific and more technical.