Certified Information Systems Auditor (CISA)
Prove your knowledge and get the power you need to advance in your profession with ISACA’s Certified Information Systems Auditor (CISA) certification.
-
Module 1: The process of auditing information systems (21%)PlanningIS Audit Standards, Guidelines, and Codes of EthicsBusiness ProcessesTypes of ControlsRisk-Based Audit PlanningTypes of Audits and AssessmentsExecutionAudit Project ManagementSampling MethodologyAudit Evidence Collection TechniquesData AnalyticsReporting and Communication Techniques
-
Module 2: Governance and management of IT (16%)IT GovernanceIT Governance and IT StrategyIT-Related FrameworksIT Standards, Policies, and ProceduresOrganizational StructureEnterprise ArchitectureEnterprise Risk ManagementMaturity ModelsLaws, Regulations, and Industry Standards affecting the OrganizationIT ManagementIT Resource ManagementIT Service Provider Acquisition and ManagementIT Performance Monitoring and ReportingQuality Assurance and Quality Management of IT
-
Module 3: Information systems acquisition, development, and implementation (18%)Information Systems Acquisition and DevelopmentProject Governance and ManagementBusiness Case and Feasibility AnalysisSystem Development MethodologiesControl Identification and DesignInformation Systems ImplementationTesting MethodologiesConfiguration and Release ManagementSystem Migration, Infrastructure Deployment, and Data ConversionPost-implementation ReviewInformation Systems OperationsCommon Technology ComponentsIT Asset ManagementJob Scheduling and Production Process Automation System InterfacesEnd-User ComputingData GovernanceSystems Performance ManagementProblem and Incident ManagementChange, Configuration, Release, and Patch ManagementIT Service Level ManagementDatabase ManagementBusiness ResilienceBusiness Impact Analysis (BIA)System ResiliencyData Backup, Storage, and RestorationBusiness Continuity Plan (BCP)Disaster Recovery Plans (DRP)
-
Module 4: Information systems operations, maintenance and support (20%)Conduct periodic reviews of information systemsEvaluate service level management practicesEvaluate third-party management practicesEvaluate data administration practicesEvaluate the use of capacity and performance monitoring tools and techniquesEvaluate change, configuration, and release management practices
-
Module 5: Protection of information assets (25%)Information Asset Security and ControlInformation Asset Security Frameworks, Standards, and GuidelinesPrivacy PrinciplesPhysical Access and Environmental ControlsIdentity and Access ManagementNetwork and End-Point SecurityData ClassificationData Encryption and Encryption-Related TechniquesPublic Key Infrastructure (PKI)Web-Based Communication TechniquesVirtualized EnvironmentsMobile, Wireless, and Internet-of-Things (IoT) DevicesSecurity Event ManagementSecurity Awareness Training and ProgramsInformation System Attack Methods and TechniquesSecurity Testing Tools and TechniquesSecurity Monitoring Tools and TechniquesIncident Response ManagementEvidence Collection and ForensicsSupporting Tasks
About The Course
Certified Information System Auditor (CISA) certification is a foundation for a successful IT career.
If you are an entry-level to mid-career professional, the CISA training course is ideal for entry-level to mid-career professionals. It demonstrates your expertise and validates your ability to apply a risk-based approach to planning, executing, and reporting on audit engagement projects. Moreover, with CISA certification aboard, you get the opportunity to gain instant credibility in your interactions with internal stakeholders, regulators, external auditors, and customers.
Course Objectives
This course teaches you about core aspects such as:
- Vulnerability assessment and identification
- Information Systems Audit and assurance guidelines
- Auditing Information Systems
- Governance and IT management
- Information Systems acquisition development and implementation
- Information Systems operations maintenance and service management
- Information asset protection
Pre-Requisites
Candidates who wish to take up the Certified Information Systems Auditor (CISA) certification exam should have a minimum of 5 years of work experience in information systems auditing, IT security, and control.
There can be an experience waiver of up to 3 years from the required 5-year experience by:
- 1 year of information systems experience or 1-year of non-IS auditing experience can be used for the 1-year actual experience required for CISA (out of 5 years)
- 2 year or 4 years Degree can be used as a substitute for 1 or 2 years of experience, respectively
- A Master’s degree in IS or IT from a reputed university can be used as a substitute for 1 year of experience required for CISA
What's included
- 40 Hours Training Course
- Certificate
- 5 Module
- 24/7 Support
