CISA Certification | CISA Courses | Cyber Security

What is the CISA Certified Information Systems Auditor course?

The Certified Information Systems Auditor training course is a globally recognised qualification for audit, information systems, and security professionals. The CISA provides candidates with further cyber security knowledge, enables them to identify vulnerabilities, and apply technological controlling. The training course requires candidates to have 5 years of field experience, hence it is a renowned and accredited certification to obtain. Due to being such a valuable training course, much work experience and knowledge is necessary in order to participate. The CISA training course takes 4 days to complete. The Certified Information Systems Auditor qualification is provided by ISACA, an association devoted to IT professionals who provides them with the best knowledge and certifications.

What topics are covered by the CISA training course?

The CISA training course covers all 5 aspects of Information Security Auditing:

Auditing information systems
IT management
IS acquisition, development, and implementation
IS operations, maintenance, and support
Information asset protection

Why should the CISA Certified Information Systems Auditor training course be completed?

For candidates:

Confirms and validates knowledge and experience of IS auditing and security.
Global recognition of expertise.
An advantage against competing employees.

For employers:

Adds credibility to the business due to the renowned reputation of CISA.
Reliable employees who possess extensive knowledge and experience.
Certification reconsidered every 3 years, so your business can keep up to date with the most recent auditing standards.

What are the objectives of the CISA Certified Information Systems Auditor course?

By the end of completing the CISA course delegates will be:

Experienced with IS auditing and security
More employable in the Information Systems field
Able to complete and pass the official CISA exam

How are CISA candidates assessed?

The exam is booked via ISACA and occurs 3 times a year.

You have the option to take the exam in June, September or December.

The exam will last 4 hours and will include 200 multiple choice questions which is marked out of 800 total point. To pass this exam you will need to achieve a score of 450/800 in total.

Who is this course for?

There are no pre-requisites to take this course.

Information Systems Audit Process:

Developing a risk-based IT audit strategy
Planning specific audits
Conducting audits to IS audit standards
Implementation of risk management and control practices

IT Governance and Management:

Effectiveness of IT Governance structure
IT organisational structure and human resources (personnel) management
Organisation's IT policies, standards and procedures
Adequacy of the Quality Management System
IT management and monitoring of controls
IT resource investment
IT contracting strategies and policies
Management of organisations IT related risks
Monitoring and assurance practices
Organisation business continuity plan

Information Systems Acquisition, Development and Implementation:

Business case development for IS acquisition, development, maintenance and retirement
Project management practices and controls
Conducting reviews of project management practices
Controls for requirements, acquisition, development and testing phases
Readiness for information systems
Project Plan Reviewing
Post Implementation System Reviews

Information Systems Operations, Maintenance and Support:

Conduct periodic reviews of organisations objectives
Service level management
Third party management practices
Operations and end-user procedures
Process of information systems maintenance
Data administration practices to determine the integrity & optimisation of databases
Use of capacity and performance monitoring tools & techniques
Problem and incident management practices
Change, configuration and release management practices
Adequacy of backup and restore provisions
Organisation's disaster recovery plan in the event of a disaster

Protection of Information Assets:

Information security policies, standards and procedures
Design, implementing, monitoring of system and logical security controls
Design, implementing, monitoring of data classification processes and procedures
Design, implementing, monitoring of physical access and environmental controls
Processes and procedures to store, retrieve, transport and dispose of information assets