Cisa® Certified Information Systems Auditor

The ISACA® Certified Information Systems Auditor® (CISA®) certification is the globally accepted standard of achievement among information systems (IS) audit, control and security professionals.

The technical skills and practices that CISA promotes and evaluates are the building blocks of success in the field. Possessing the CISA designation demonstrates proficiency and is the basis for measurement in the profession.

The CISA preparation course provides an intense environment in which participants can acquire, thoroughly and properly, the skills and knowledge expected of a world-class information systems audit, control and security professional. In the process the course provides outstanding preparation for the CISA exam.

Learning Outcomes

This course has been independently commissioned with three objectives:

• To provide an in-depth understanding of the tasks and knowledge expected of a world class information systems auditor

• To provide candidates with a clear understanding of the CISA examination and certification processes

• To maximise your prospects at the CISA exam if you choose to sit it

Who Should Attend

The CISA designation is for Information Systems Audit professionals who have 5 years of front-line experience with the audit of information systems.

Prerequisities:

Applicants must meet the following requirements to become CISA Certified:

• Demonstrate the Required Minimum Work Experience: A minimum of 5-years of professional information systems auditing, control or security work experience – as described in the CISA job practice areas – is required for certification. The work experience for CISA certification must be gained within the 10-year period preceding the application date for certification. Candidates have 5-years from the passing date to apply for certification.

Contents

Achieving CISA Certification

•   Certification Prerequisites

•   Examination Information

•   Applying for Certification

•   Maintaining Certification

The Process of Auditing Information Systems

•   Management of the IS Audit function

•   ISACA IS Auditing Standards and Guidelines

•   Risk Analysis

•   Internal Controls

•   Performing an IS Audit

•   Control Self-assessment

•   The Evolving  IS Audit Process

Governance and Management of IT

•   Corporate Governance

•   IT Governance

•   Information Technology Monitoring and Assurance Practices for Board and Senior Management

•   Information Systems Strategy

•   Maturity and Process Improvement Models

•   IT Investment and Allocation Practices

•   Policies and Procedures

•   Risk Management

•   IS Management Practices

•   IS Organisational Structure and Responsibilities

•   Auditing IT Governance Structure and Implementation

•   Business Continuity Planning

•   Auditing Business Continuity

Information Systems Acquisition, Development and Implementation

•   Business Realisation

•   Project Management Structure

•   Project Management Practices

•   Business Application Development

•   Business Application Systems

•   Alternative Forms of Software Project Organisation

•   Alternative Development Methods

•   Infrastructure Development / Acquisition Practices

•   Information Systems Maintenance Practices

•   System Development Tools and Productivity Aids

•   Process Improvement Practices

•   Application Controls

•   Auditing Application Controls

•   Auditing Systems Development, Acquisition and Maintenance

Information Systems Operations, Maintenance and Support

•   Information Systems Operations

•   Information Systems Hardware

•   IS Architecture and Software

•   IS Network Infrastructure

•   Auditing Infrastructure and Operations

•   Disaster Recovery Planning

Protection of Information Assets

•   Importance of Information Security Management

•   Logical Access

•   Network Infrastructure Security

•   Auditing Information Security Management Framework

•   Auditing Network Infrastructure Security

•   Environmental Exposures and Controls

•   Physical Access Exposures and Controls

•   Mobile Computing

Examination Administration and Techniques

•   Examination Administration

•   Examination Techniques

•   Frequently Asked Questions