SC230: ISACA™ CISA Preparation

Agenda:

• Domain 1 - Information systems auditing process (18%)
  • Planning
    • IS audit standards, guidelines, and codes of ethics
    • Types of audits, assessments, and reviews
    • Risk-Based audit planning
    • Types of audits and considerations
  • Execution
    • Audit project management
    • Audit sampling and testing methodology
    • Audit evidence collection techniques
    • Audit data analysis
    • Reporting and communication techniques
    • Quality assurance and improvement of the audit process
      
      
• Domain 2 - Governance & management of IT (18%)
  • IT Governance and IT Strategy
    • Laws, regulations, and industry standards
    • Organizational structure, IT governance, and IT strategy
    • IT Policies, standards, procedures, and guidelines
    • Enterprise architecture and considerations
    • Enterprise Risk Management (ERM)
    • Privacy program and principles
    • Data management and classification
  • IT management
    • IT resource management
    • Acquisition and management of IT service providers
    • Monitoring and reporting of IT performance
    • Quality assurance and quality management of IT
      
      
• Domain 3 - Acquisition, development, and implementation of information systems (12%)
  • Acquisition and development of Information Systems
    • Project governance and management
    • Business case and feasibility analysis
    • System development methodologies
    • Control identification and design
  • Implementation of Information Systems
    • System readiness and implementation testing
    • Implementation configuration and release management
    • System migration, infrastructure deployment, and data conversion
    • Post-Implementation review
      
      
• Domain 4 - Information systems operations and business resilience (26%)
  • Information systems operations
    • IT components
    • IT asset management
    • Job scheduling and production process automation
    • System interfaces
    • End-user computing and shadow IT
    • System availability and capacity management
    • Problem and incident management
    • IT change, configuration, and patch management
    • Operational log management
    • IT Service level management
    • Database management
  • Business Resilience
    • Business Impact Analysis (BIA)
    • System and operational resilience
    • Data backup, storage, and recovery
    • Business Continuity Plan (BCP)
    • Disaster Recovery Plans (DRP)
      
      
• Domain 5 - Protection of information assets (26%)
  • Security and control of information assets
    • Information asset security policies, frameworks, standards, and guidelines
    • Physical access and environmental controls
    • Identity and access management
    • Network and endpoint security
    • Data loss prevention
    • Data encryption
    • Public Key Infrastructure (PKI)
    • Cloud and virtualized environments
    • Mobile, wireless, and Internet of Things devices
  • Security event management
    • Security awareness training and programs
    • Information systems attack methods and techniques
    • Security testing tools and techniques
    • Security monitoring protocols, tools, and techniques
    • Security incident management
    • Evidence collection and forensics
      
      
• Practice Questions/Review/CISA exam preparation

Objectives:

Target audience:

Do you wish to enhance your professional performance or advance to a new position? Obtaining the title of a CISA will distinguish you from other candidates and provide you with a competitive advantage. The workshop is aimed at anyone who wishes to successfully achieve the CISA certification.

Job titles include:

• IT Professionals
• Auditors
• Internal Auditors and Financial Auditors
• Risk Managers and Consultants

Prerequisites:

To obtain the CISA certification, the following requirements must be met:

• Successful completion of the CISA exam
• Adherence to the ISACA™ Code of Professional Ethics
• Evidence of at least five years of experience in the field of IS/IT audit, control, assurance, or security.

Description:

Other Info:

This SC230 ISACA™ CISA Preparation workshop provides intensive preparation for the ISACA™ examination to obtain the CISA certification. The paid examination consists of 150 questions, which must be completed within four hours. The questions relate to five domains identified by ISACA™ as part of the current CISA job practice analysis.
The examination is not included in the course and is conducted on a separate date. It is administered exclusively via PSI, either as an online examination or at an authorized PSI test center. The examination can be purchased through qSkills™.

ISACA™ certification exam – retake policy

The following regulations for retake exams apply to ISACA™ certification exams:

Candidates have a total of four attempts to pass the respective certification exam within a rolling period of twelve months. If the exam is not passed on the first attempt, a maximum of three further attempts are available within twelve months from the date of the first exam attempt.

The following waiting periods apply for retake exams:

• Retake 1 (2nd exam attempt): at the earliest 30 days after the first exam attempt

• Retake 2 (3rd exam attempt): at the earliest 90 days after the second exam attempt

• Retake 3 (4th exam attempt): at the earliest 90 days after the third exam attempt

For each individual exam attempt, the respectively applicable exam fee must be paid in full.

After passing the exam, the same certification exam may not be taken again within the five-year application period.

Holders of a valid ISACA™ certification may not take the corresponding certification exam again during the validity of their certification.

The current exam and retake policies of ISACA™ apply.

Course language: German or English
Course materials: English
Examination language: English

The official ISACA™ course materials are provided in digital format. Please bring either a laptop or a tablet to the training. Internet access for your device is, of course, available free of charge at our training center.