The Certified Information System Auditor (CISA) is a globally recognized certification for IS audit, control, and security professionals. It is one of the hottest, most valuable and highest paying Professional Certification with a huge shortage of available manpower globally as listed by CIO and Global Knowledge.
This training will provide requisite knowledge to IT professionals, auditors and senior managers to govern, manage, control and audit their organization’s information systems or liaison with external auditors in an informed and effective way.
The course also prepares participants who aspire to become CISA certified for the certification exam after they have finished the training.
Course Outline
CISA Self-Assessment Pre-Test
Domain 1 —The Process of Auditing Information Systems
- Risk-based IS Audit Strategy and Plan Audits
- Conduct Audits
- Process & Procedures
- Important Concepts
- Control Self-Assessments (CSA)
- Communicate Audit Results & Follow-up
Domain 2 – Governance & Management of IT
- Evaluate the IT Strategy and IT Governance Structure
- Evaluate the IT Organization Structure & HR Management, IT Policies, Standards, Procedures, Resource Management & IT Portfolio Management
- Evaluate Risk Management Practices & IT Management
- Evaluate Controls & KPIs and Organization’s BCP
Domain 3 – Information Systems Acquisition, Development, & Implementation
- Evaluate the Business Case for Proposed Investments
- Evaluate the IT Supplier Selection & Contract Management Processes
- Evaluate the Project Management Framework
- Conduct Project Reviews and Post-Implementation Reviews
- Virtualization & Cloud Service Provider (CSP) Architecture
- Evaluate Controls for Information Systems during Acquisition
- Evaluate Readiness for Implementation
Domain 4 – Information Systems Operations, Maintenance, & Service Management
- Evaluate IT Service Management Framework & Practices
- Conduct Periodic Reviews of Information Systems
- Evaluate IT Operations & IT Maintenance, Problem & Incident Management
- Evaluate Database Management Practices & Data Quality
- Change and Release Management Practices& Disaster Recovery Testing
- Evaluate End User Computing, & IT Continuity & Resilience
Domain 5 – Protection of Information Assets
- Evaluate Information Security & Privacy, Physical & Environmental Controls
- Evaluate the System & Logical Security Controls
- Evaluate Data Classification & Information Asset Safeguards
- Evaluate Information Security Programs
CISA Sample Exam
· 100 questions
