Duration:
5 days
Course Synopsis:
An ISACA Certified Information Systems Auditor (CISA) is world-renowned as the standard of achievement for those who audit, control, monitor and assess an organization’s information technology and business systems. This CISA training course provides you with in-depth coverage of the five CISA domains that are covered on the CISA exam. These domains include information systems auditing process; governance and management of IT; information systems acquisition, development, and implementation; information systems operations and business resilience; and protection of information assets.
Course Objectives:
- Prepare for and pass the Certified Information Systems Auditor (CISA) Exam.
- Develop and implement a risk-based IT audit strategy in compliance with IT audit standards.
- Evaluate the effectiveness of an IT governance structure.
- Ensure that the IT organizational structure and human resources (personnel) management support the organization’s strategies and objectives.
- Review the information security policies, standards, and procedures for completeness and alignment with generally accepted practices.
Course Prerequisites:
IT professionals must have 5 years or more of information systems auditing, control, assurance, or security work experience. This experience must be in at least one CISA Job Practice Domain Area.
Who Should Attend:
This course is open to any individual who are:
- Professionals preparing to become CISA certified
- Financial auditors moving into IT audit
- IT generalists moving into IT audit
- Mid-level career change
- Students or recent graduates
Domain 1: Information System Auditing Process
- Planning
- IS Audit Standards, Guidelines, Functions, and Codes of Ethics
- Types of Audits, Assessments, and Reviews
- Risk-Based Audit Planning
- Types of Controls and Considerations
- Execution
- Audit Project Management
- Audit Testing and Sampling Methodology
- Audit Evidence Collection Techniques
- Audit Data Analytics (including audit algorithms)
- Reporting and Communication Techniques
- Quality Assurance and Improvement of Audit Process
Domain 2: Governance & Management of IT
- IT Governance
- Laws, Regulations, and Industry Standards
- Organizational Structure, IT Governance, and IT Strategy
- IT Policies, Standards, Procedures and Practices
- Enterprise Architecture (EA) and Considerations
- Enterprise Risk Management (ERM)
- Privacy Program and Principles
- Data Governance and Classification
- IT Management
- IT Resource Management
- IT Vendor Management
- IT Performance Monitoring and Reporting
- Quality Assurance and Quality Management of IT
Domain 3: Information Systems Acquisition, Development, and Implementation
- Information Systems Acquisition and Development
- Project Governance and Management
- Business Case and Feasibility Analysis
- System Development Methodologies
- Control Identification and Design
- Information Systems Implementation
- System Readiness and Implementation Testing
- Implementation Configuration and Release Management
- System Migration, Infrastructure Deployment, and Data Conversion
- Post-Implementation Review
Domain 4: Information Systems Operations and Business Resilience
- Information Systems Operations
- IT Components
- IT Asset Management
- Job Scheduling and Production Process Automation
- System Interfaces
- Shadow IT and End-User Computing (EUC)
- Systems Availability and Capacity Management
- Problem and Incident Management
- IT Change, Configuration, and Patch Management
- Operational Log Management
- IT Service Level Management
- Database Management
- Business Resilience
- Business Impact Analysis (BIA)
- System and Operational Resilience
- Data Backup, Storage, and Restoration
- Business Continuity Plan (BCP)
- Disaster Recovery Plans (DRP)
Domain 5: Protection of Information Assets
- Information Asset Security and Control
- Information Asset Security Policies, Frameworks, Standards, and Guidelines
- Physical and Environmental Controls
- Identity and Access Management
- Network and End-Point Security
- Data Loss Prevention (DLP)
- Data Encryption
- Public Key Infrastructure (PKI)
- Cloud and Virtualized Environments
- Mobile, Wireless, and Internet-of-Things (IoT) Devices
- Security Event Management
- Security Awareness Training and Programs
- Information System Attack Methods and Techniques
- Security Testing Tools and Techniques
- Security Monitoring Logs, Tools, and Techniques
- Security Incident Response Management
- Evidence Collection and Forensics
Examination Information
Length of exam
4 hours
Number of questions
Question format
Multiple choice
Passing grade
450 out of 800 points
Exam availability
English, Chinese Simplified, Spanish, French, German, Japanese, Korean.
Testing center
PSI Testing Center or Online Proctoring
Programme scope, delivery arrangements and suitability are confirmed during enquiry.