CISA Certified Information Systems Auditor

Certified Information Systems Auditor Training Course Overview 

Prerequisites of the Certified Information Systems Auditor Training 

Who should attend this Certified Information Systems Auditor Training 

Course Structure 

• The first 3 days will cover the essential materials needed to understand Certified Information Systems Auditor (CISA) 
• The last day will cover the essential materials needed to take the CISA Certified Information Systems Auditor exam 

Certified Information Systems Auditor Training Course Outline 

• Introduction 
• IS Audit Standards, Guidelines, and Codes of Ethics 
  
• Business Processes 
  
• Types of Controls 
  
• Risk-Based Audit Planning 
  

• Audit Project Management 
• Sampling Methodology 
  
• Audit Evidence Collection Techniques 
  
• Data Analytics 
  
• Reporting and Communication Techniques 
  
• Quality Assurance and Improvement of the Audit Process 
  

• Introduction to IT Governance and IT Strategy 
• IT-Related Frameworks 
  
• IT Standards, Policies, and Procedures 
  
• Organisational Structure 
  
• Enterprise Architecture 
  
• Enterprise Risk Management 
  
• Maturity Models 
  
• Laws, Regulations, and Industry Standards Affecting the Organisation 
  

• IT Resource Management 
• IT Service Provider Acquisition and Management 
  
• IT Performance Monitoring and Reporting 
  
• Quality Assurance and Quality Management of IT 
  

• Project Governance and Management 
• Business Case and Feasibility Analysis 
  
• System Development Methodologies 
  
• Control Identification and Design 
  

• Testing Methodologies 
• Configuration and Release Management 
  
• System Migration, Infrastructure Deployment, and Data Conversion 
  
• Post-Implementation Review 
  

• Introduction 
• Common Technology Components 
  
• IT Asset Management 
  
• Job Scheduling and Production Process Automation 
  
• System Interfaces 
  
• End User Computing 
  
• Data Governance 
  
• System Performance Management 
  
• Problem and Incident Management 
  
• Change, Configuration, Release, and Patch Management 
  
• IT Service Level Management 
  
• Database Management 
  

• Business Impact Analysis 
• System Resiliency 
• Data Backup, Storage, and Restoration 
  • Backup and Restoration 
    
  • Backup Schemes 
    
• Business Continuity Plan 
  
  • IT Business Continuity Planning 
    
  • Disasters and Other Disruptive Events 
    
  • Business Continuity Policy 
    
  • Business Continuity Planning Incident Management 
    
  • Development of Business Continuity Plans 
    
  • Other Issues in Plan Development 
    
  • Components of a Business Continuity Plan 
    
  • Key Decision-Making Personnel 
    
  • Backup of Required Supplies 
    
  • Insurance 
    
  • Plan Testing 
    
  • Auditing Business Continuity 
    
• Disaster Recovery Plans 
  

• Introduction to Asset Security Frameworks, Standards, and Guidelines 
• Auditing the Information Security Management Framework 
  
• Privacy Principles 
  
• Physical Access and Environmental Controls 
  
• Identity and Access Management 
  
• Network and End-Point Security 
  
• Shadow IT 
  
• Data Classification 
  
• Data Encryption and Encryption Related Techniques 
  
• Symmetric Key Cryptographic Systems 
  
• Public (Asymmetric) Key Cryptographic Systems 
  
• Applications of Cryptographic Systems 
  
• Public Key Infrastructure 
  
• Web-Based Communication Technologies 
  
• Virtualised Environments 
  
• Mobile, Wireless, and Internet of Things 
  

• Security Awareness Training and Programmes 
• Information System Attack Methods and Techniques 
  
• Security Testing Tools and Techniques 
  
• Incident Response Management 
  
• Evidence Collection and Forensics