Certified Information Systems Auditor (CISA®) Certification
Course Specifications
Course number: 085056
Course length: 5.0 day(s)
Course Description
Course Objective: You will perform evaluations of organizational policies, procedures, and processes to ensure that an organization's information systems
align with overall business goals and objectives.
Target Student: The intended audience for this course is information systems security professionals and internal review auditors and other
individuals who have an interest in aspects of information systems audit, controls, and security.
Prerequisites: Students taking this course should have a minimum of five years of professional information systems auditing, control, or
security work experience as described in the CISA job practice domain areas:
- IS Audit Process
- IT Governance
- Systems and Infrastructure Lifecycle Management
- IT Service Delivery and Support
- Protection of Information Assets
- Business Continuity and Disaster Recovery
While this course will help prepare candidates for the CISA exam, it is not the only preparation that should be used. ISACA
requires that the successful CISA candidate have at least five years of professional experience; because of this, the CISA
exam will draw on material and experience that is beyond the scope of any single training course, most notably covering database
administration, network components and theory, software and operating systems, and hardware devices. Candidates who wish to
solidify their understanding of this material might choose to take additional training in these areas if they don’t feel their
professional experience is sufficient.
Hardware Requirements
This course is designed so that it can be run without computer hardware or software for students. If the instructor wants
to use the overheads provided on the course CD-ROM, the following hardware will be required.
- A Pentium® III with 500 MHz (or better), or Macintosh® Intel-based or PowerPC G4 (or better) processor.
- At least 512 MB of RAM.
- A monitor capable of 1024 x 768 screen resolution and 32-bit color display.
- A projection system to display the overheads to the students.
Software Requirements
Each computer requires the following software:
- Microsoft® Windows® 7, Windows Vista®, Windows XP (Professional or Home Edition), Windows 2000, or Apple® Mac OS® X 10.4 (or
higher).
Course Objectives
Upon successful completion of this course, students will be able to:
- implement information systems audit services in accordance with information systems audit standards, guidelines, and best
practices.
- evaluate an organization's structure, policies, accountability, mechanisms, and monitoring practices.
- evaluate an organization's systems and infrastructure lifecycle management practices.
- perform the post-implementation tasks needed to determine if the changes made were done correctly, meet their objectives,
and are being properly maintained.
- evaluate the IT service delivery and support of an organization.
- define the protection policies used to promote the confidentiality, integrity, and availability of information assets.
- evaluate the business continuity and disaster recovery processes used to provide assurance that in the event of a disruption,
IT services are maintained.
Course Content
- Lesson 1: The Information Systems Audit Process
- Topic 1A: ISACA Information Systems Auditing Standards and Guidelines
- Topic 1B: Develop and Implement an Information Systems Audit Strategy
- Topic 1C: Plan an Audit
- Topic 1D: Conduct an Audit
- Topic 1E: The Evidence Lifecycle
- Topic 1F: Communicate Issues, Risks, and Audit Results
- Topic 1G: Support the Implementation of Risk Management and Control Practices
- Lesson 2: IT Governance
- Topic 2A: Evaluate the Effectiveness of IT Governance
- Topic 2B: Evaluate the IT Organizational Structure
- Topic 2C: Evaluate the IT Strategy
- Topic 2D: Evaluate IT Policies, Standards, and Procedures for Compliance
- Topic 2E: Ensure Organizational Compliance
- Topic 2F: IT Resource Investment, Use, and Allocation Practices
- Topic 2G: Evaluate IT Contracting Strategies and Policies
- Topic 2H: Evaluate Risk Management Practices
- Topic 2I: Performance Monitoring and Assurance Practices
- Lesson 3: Systems and Infrastructure Lifecycle Management
- Topic 3A: Determine the Business Case for Change
- Topic 3B: Evaluate Project Management Frameworks and Governance Practices
- Topic 3C: Perform Periodic Project Reviews
- Topic 3D: Evaluate Control Mechanisms for Systems
- Topic 3E: Evaluate Development and Testing Processes
- Topic 3F: Evaluate Implementation Readiness
- Topic 3G: Evaluate a System Migration
- Lesson 4: Systems and Infrastructure Lifecycle Maintenance
- Topic 4A: Perform a Post-Implementation System Review
- Topic 4B: Perform Periodic System Reviews
- Topic 4C: Evaluate the Maintenance Process
- Topic 4D: Evaluate the Disposal Process
- Lesson 5: IT Service Delivery and Support
- Topic 5A: Evaluate Service Level Management Practices
- Topic 5B: Evaluate Operations Management
- Topic 5C: Evaluate Data Administration Practices
- Topic 5D: Evaluate the Use of Capacity and Performance Monitoring Methods
- Topic 5E: Evaluate Change, Configuration, and Release Management Practices
- Topic 5F: Evaluate Problem and Incident Management Practices
- Topic 5G: Evaluate the Functionality of the IT Infrastructure
- Lesson 6: Protection of Information Assets
- Topic 6A: Information Security Design
- Topic 6B: Encryption Basics
- Topic 6C: Evaluate the Design, Implementation, and Monitoring of Logical Access Controls
- Topic 6D: Evaluate the Design, Implementation, and Monitoring of Physical Access Controls
- Topic 6E: Evaluate the Design, Implementation, and Monitoring of Environmental Controls
- Topic 6F: Evaluate Network Infrastructure Security
- Topic 6G: Evaluate the Confidential Information Processes and Procedures
- Lesson 7: Business Continuity and Disaster Recovery
- Topic 7A: Evaluate the Adequacy of Backup and Restore
- Topic 7B: Evaluate the BCP and DRP
Appendix A: ISACA® CISA® Certification Process