CISA – Certified Information Systems Auditor

Lecture 1:

• IS Audit Standards, Guidelines, and Codes of Ethics
• Business Processes and Risk-based Audit Planning
• Types of Controls and Audits
• Audit Project Management
• Sampling Methodology and Data Analytics
• Audit Evidence Collection Techniques
• Reporting and Communication Techniques
• Quality Assurance and Improvement of the Audit Process

• IT Governance and IT Strategy
  • IT-related Frameworks, Standards, Policies, and Procedures
  • Organizational Structure and Enterprise Architecture
  • Enterprise Risk Management
  • Maturity Models
  • Laws, Regulations, and Industry Standards

• IT Management

• • IT Resource Management
  • IT Service Provider Acquisition and Management
  • IT Performance Monitoring and Reporting
  • Quality Assurance and Quality Management of IT

• Information Systems Acquisition and Development

• • Project Governance and Management
  • Business Case and Feasibility Analysis
  • System Development Methodologies
  • Control Identification and Design

• Information Systems Implementation

• • Testing Methodologies
  • Configuration and Release Management
  • System Migration and Data Conversion
  • Post-Implementation Review

• Information Systems Operations

• • Common Technology Components
  • IT Asset Management and Job Scheduling
  • System Interfaces and End-User Computing
  • Data Governance and Systems Performance Management
  • Problem and Incident Management
  • Change, Configuration, Release, and Patch Management
  • IT Service Level Management
  • Database Management

• Business Resilience

• • Business Impact Analysis
  • System Resiliency
  • Data Backup, Storage, and Restoration
  • Business Continuity Plan and Disaster Recovery Plans

• Information Asset Security Frameworks, Standards, and Guidelines

• • Privacy Principles
  • Physical Access and Environmental Controls
  • Identity and Access Management
  • Network and Endpoint Security
  • Data Classification, Encryption, and Encryption-related Techniques
  • Public Key Infrastructure and Web-based Communication Technologies
  • Virtualized Environments and Mobile, Wireless, IoT Devices

• Security Event Management

• • Security Awareness Training and Programs
  • Information System Attack Methods and Techniques
  • Security Testing Tools and Techniques
  • Security Monitoring Tools and Techniques
  • Incident Response Management
  • Evidence Collection and Forensics