Certified Information Systems Auditor (CISA) Training
Course Authors
Certified Information Systems Auditor (CISA) Training Hands-on (Online, Onsite, and Classroom Live)
| Commitment | 5 Days, 7-8 hours a day. |
| Language | English |
| User Ratings | Average User Rating 4.8 See what learners said |
| Price | REQUEST |
| Delivery Options | Instructor-Led Onsite, Online, and Classroom Live |
COURSE OVERVIEW
This CISA Certification course is designed for experienced information security professionals who are preparing to take the CISA exam.
CISA is the globally recognized gold standard for IS audit, control, and assurance, in demand and valued by leading global brands. It’s often a mandatory qualification for employment as an IT auditor. CISA holders have validated ability to apply a risk-based approach to planning, executing and reporting on audit engagements. This CISA training course provides you with in-depth coverage of the five CISA domains that are covered on the CISA exam. These domains include auditing information systems; IT governance and management of IT; information systems acquisition, development, and implementation; information systems operations and business resilience; and protection of information assets.
This Certified Information Systems Auditor (CISA) course supports a certification that is a DoD Approved 8570 Baseline Certification and meets DoD 8140/8570 training requirements.
WHAT'S INCLUDED?
- 4 Days of CISA Training from an Authorized ISACA Instructor
- ISACA-approved CISA Training Student Guide
- ISACA-approved CISA Training Labs
- ISACA-approved CISA Practice Exams
- 100% Satisfaction Guarantee
- Exam Pass Guarantee
RESOURCES
- Certified Information Systems Auditor (CISA) Training – https://www.wiley.com/
- Certified Information Systems Auditor (CISA) Training – https://www.packtpub.com/
- Certified Information Systems Auditor (CISA) – https://store.logicaloperations.com/
- Certified Information Systems Auditor (CISA) – https://us.artechhouse.com/
- Certified Information Systems Auditor (CISA) Training – https://www.amazon.com/
RELATED COURSES
- Certified Authorization Professional Training (CAP)
- Computer Hacking Forensics Investigator Training (CHFI)
- Certified Information Security Manager Training (CISM)
- Certified Secure Software Lifecycle Professional Training (CSSLP)
- Certified Information Systems Security Professional Training (CISSP)
- Certified in Risk and Information Systems Control Training (CRISC)
- Certified Penetration Testing Engineer Training (CPTE)
- Certified Digital Forensics Examiner Training (CDFE)
- Certified Disaster Recovery Engineer Training (CDRE)
- Certified Network Forensics Examiner Training (CNFE)
- Certified Secure Web Application Engineer Training (CSWAE)
- Certified Professional Ethical Hacker Training (CPEH)
ADDITIONAL INFORMATION
COURSE OBJECTIVES
This CISA Workshop extensively prepares you for the CISA exam, which consists of 150 multiple-choice questions that cover the five information systems auditing areas. These areas have been created from a CISA job practice analysis and reflect the work performed by information systems auditors.
- Prepare for and pass the Certified Information Systems Auditor (CISA) Exam
- Develop and implement a risk-based IT audit strategy in compliance with IT audit standards
- Evaluate the effectiveness of an IT governance structure
- Ensure that the IT organizational structure and human resources (personnel) management support the organization’s strategies and objectives
- Review the information security policies, standards, and procedures for completeness and alignment with generally accepted practices
CUSTOMIZE IT
- We can adapt this Certified Information Systems Auditor (CISA) Training course to your group’s background and work requirements at little to no added cost.
- If you are familiar with some aspects of this Certified Information Systems Auditor (CISA) course, we can omit or shorten their discussion.
- We can adjust the emphasis placed on the various topics or build the Certified Information Systems Auditor (CISA) around the mix of technologies of interest to you (including technologies other than those included in this outline).
- If your background is nontechnical, we can exclude the more technical topics, include the topics that may be of special interest to you (e.g., as a manager or policy-maker), and present the Certified Information Systems Auditor (CISA) course in a manner understandable to lay audiences.
AUDIENCE/TARGET GROUP
The intended audience for the Certified Information Systems Auditor (CISA) Training program is professionals with work experience in information systems auditing, control, or security. Sample job titles might include:
- IS/IT Auditors
- IS/IT Consultants
- Security Analysts and Professionals
- IS/IT Audit Managers
- Anyone interested in learning auditing skills and getting certified
CLASS PREREQUISITES
The knowledge and skills that a learner must have before attending this Certified Information Systems Auditor (CISA) course are:
- A minimum of five years of professional information systems auditing, control, or security work experience is required for certification; however, up to three years can be waived if other requirements are met. You have five years after passing the exam to gain the necessary work experience and apply for certification.
COURSE SYLLABUS
Domain 1 – Information System Auditing Process
Topics:
- IS Audit Standards, Guidelines, Functions, and Codes of Ethics
- Types of Audits, Assessments, and Reviews
- Risk-based Audit Planning
- Types of Controls and Considerations
- Audit Project Management
- Audit Testing and Sampling Methodology
- Audit Evidence Collection Techniques
- Audit Data Analytics
- Reporting and Communication Techniques
- Quality Assurance and Improvement of Audit Process
Domain 2 – Governance and Management of IT
Topics
- Laws, Regulations, and Industry Standards
- Organizational Structure, IT Governance, and IT Strategy
- IT Policies, Standards, Procedures, and Guidelines
- Enterprise Architecture and Considerations
- Enterprise Risk Management (ERM)
- Privacy Program and Principles
- Data Governance and Classification
- IT Resource Management
- IT Vendor Management
- IT Performance Monitoring and Reporting
- Quality Assurance and Quality Management of IT
Domain 3 – Information Systems Acquisition, Development, and Implementation
Topics:
- Project Governance and Management
- Business Case and Feasibility Analysis
- System Development Methodologies
- Control Identification and Design
- System Readiness and Implementation Testing
- Implementation Configuration and Release Management
- System Migration, Infrastructure Deployment, and Data Conversion
- Postimplementation Review
Domain 4 – Information Systems Operations and Business Resilience
Topics:
- IT Components
- IT Asset Management
- Job Scheduling and Production Process Automation
- System Interfaces • End-user Computing and Shadow IT
- Systems Availability and Capacity Management
- Problem and Incident Management
- IT Change, Configuration, and Patch Management
- Operational Log Management
- IT Service Level Management
- Database Management
- Business Impact Analysis
- System and Operational Resilience
- Data Backup, Storage, and Restoration
- Business Continuity Plan
- Disaster Recovery Plans
Domain 5 – Protection of Information Assets
Topics:
- Information Asset Security Policies, Frameworks, Standards, and Guidelines
- Physical and Environmental Controls
- Identity and Access Management
- Network and End-Point Security
- Data Loss Prevention
- Data Encryption
- Public Key Infrastructure (PKI)
- Cloud and Virtualized Environments
- Mobile, Wireless, and Internet-of-Things Devices
- Security Awareness Training and Programs
- Information System Attack Methods and Techniques
- Security Testing Tools and Techniques
- Security Monitoring Logs, Tools, and Techniques
- Security Incident Response Management • Evidence Collection and Forensics
