CISA® Prep Course
Certified Information Systems Auditor
Certification Description
5-Days
Validate your proficiencies for handling the challenges and responsibilities of a modern IT auditor with a CISA, which focuses on these domains:
Content Coverage
Domain 1: Information Systems Auditing Process
Providing industry-standard audit services to assist organizations in protecting and controlling information systems, Domain-1 affirms your credibility to offer conclusions on the state of an organization’s IS/IT security, risk and control solutions.
A–PLANNING
- IS Audit Standards, Guidelines, and Codes of Ethics
- Types of Audits, Assessments, and Reviews
- Risk-Based Audit Planning
- Types of Controls and Considerations
B–EXECUTION
- Audit Project Management
- Audit Testing and Sampling Methodology
- Audit Evidence Collection Techniques
- Audit Data Analytics
- Reporting and Communication Techniques
- Quality Assurance and Improvement of Audit Process
Domain 2: Governance and Management of Information Technology
This domain confirms to stakeholders your abilities to identify critical issues and recommend enterprise-specific practices to support and safeguard the governance of information and related technologies.
A–IT GOVERNANCE
- Laws, Regulations, and Industry Standards
- Organizational Structure, IT Governance, and IT Strategy
- IT Policies, Standards, Procedures and Practices
- Enterprise Architecture and Considerations
- Enterprise Risk Management
- Privacy Program and Principles
- Data Governance and Classification
B–IT MANAGEMENT
- IT Resource Management
- IT Vendor Management
- IT Performance Monitoring and Reporting
- Quality Assurance and Quality Management of IT
Domain 3: Information Systems Acquisition, Development & Implementation
Domains 3 and 4 offer proof not only of your competency in IT controls, but also your understanding of how IT relates to business.
A–INFORMATION SYSTEMS ACQUISITION AND DEVELOPMENT
- Project Governance and Management
- Business Case and Feasibility Analysis
- System Development Methodologies
- Control Identification and Design
B–INFORMATION SYSTEMS IMPLEMENTATION
- System Readiness and Implementation Testing
- Implementation Configuration and Release Management
- System Migration, Infrastructure Deployment, and Data Conversion
- Post-implementation Review
Domain 4: Information Systems Operations and Business Resilience
Domains 3 and 4 offer proof not only of your competency in IT controls, but also your understanding of how IT relates to business.
A–INFORMATION SYSTEMS OPERATIONS
- IT Components
- IT Asset Management
- Job Scheduling and Production Process Automation
- System Interfaces
- Shadow IT and End-User Computing
- Systems Availability and Capacity Management
- Problem and Incident Management
- IT Change, Configuration, and Patch Management
- Operational Log Management
- IT Service Level Management
- Database Management
B–BUSINESS RESILIENCE
- Business Impact Analysis
- System and Operational Resilience
- Data Backup, Storage, and Restoration
- Business Continuity Plan
- Disaster Recovery Plans
Domain 5: Protection of Information Assets
Cybersecurity now touches virtually every information systems role, and understanding its principles, best practices and pitfalls is a major focus within Domain 5.
A–INFORMATION ASSET SECURITY AND CONTROL
- Information Asset Security Frameworks, Standards, and Guidelines
- Physical and Environmental Controls
- Identity and Access Management
- Network and End-Point Security
- Data Loss Prevention
- Data Encryption
- Public Key Infrastructure
- Cloud and Virtualized Environments
- Mobile, Wireless, and Internet-of-Things Devices
B–SECURITY EVENT MANAGEMENT
- Security Awareness Training and Programs
- Information System Attack Methods and Techniques
- Security Testing Tools and Techniques
- Security Monitoring Tools and Techniques
- Security Incident Response Management
- Evidence Collection and Forensics
Who Should Attend?
- IT Audit Directors/Managers/Consultants
- IT and Internal Auditors
- Compliance/Risk/Privacy Directors
- IT Directors/Managers/Consultants
Prerequisites
IT professionals must have 2+ years or more of IS audit, control, assurance and security experience.