CISA Certified Information Systems Auditor

CISA certified delegates stand to gain a lot from this certification. The CISA certification proves that the candidate is proficient enough in the field of IS/IT auditing and security. All these are required in a good organisation these days. Not only the employees benefit from the course as well as the exam, but the employers as well who are looking to recruit people with a high level of knowledge as far as security and auditing is concerned.

Course Content

Information Systems Audit Process:

• Learn to Develop an audit-strategy for risk.
• Audit Planning
• Conduct Audits as per the IS Audit Standards
• Perform Risk management and control practices.

IT Governance and Management:

• The IT Governance structure and its effectiveness.
• Managing IT organisational structure and human resources.
• Policies, Standards and Procedures of an Organisation.
• Quality Management System and its adequacy
• IT management and monitoring of controls.
• IT resource investment.
• IT contracting strategies and policies.
• Managing IT-related risks in an organisation.
• Monitoring and assurance practices.
• Understand the organisation business continuity plan.

Information Systems Acquisition, Development and Implementation:

• IS acquisition, development, maintenance and retirement: Business case development
• Project management : Practices and controls.
• Conducting project management practice reviews
• Requirements, acquisition, development and testing phases: Their Controls
• Readiness for information systems.
• Project Plan Reviewing.
• Post Implementation System Reviews.

Information Systems Operations, Maintenance and Support:

• Periodic reviews of organisations objectives.
• Service level management.
• Third party management practices.
• Operations and end-user procedures.
• Information systems maintenance - the Process
• Data administration practices to determine the integrity & optimisation of databases.
• Use of capacity and performance monitoring tools & techniques.
• Problem and incident management.
• Change, configuration and release management.
• Adequacy of backup and restore provisions.
• Organisation's disaster recovery plan.

Protection of Information Assets:

• Information security policies, standards and procedures.
• Design, implementing, monitoring of:
  • system and logical security controls.
  • data classification processes and procedures.
  • physical access and environmental controls.
• Processes and procedures to store, retrieve, transport and dispose of information assets.