SC230: ISACA™ CISA Preparation

Agenda:

• Domain 1 - Information systems auditing process (18%)
  • Planning
    • IS audit standards, guidelines, and codes of ethics
    • Types of audits, assessments, and reviews
    • Risk-Based audit planning
    • Types of audits and considerations
  • Execution
    • Audit project management
    • Audit sampling and testing methodology
    • Audit evidence collection techniques
    • Audit data analysis
    • Reporting and communication techniques
    • Quality assurance and improvement of the audit process
      
      
• Domain 2 - Governance & management of IT (18%)
  • IT Governance and IT Strategy
    • Laws, regulations, and industry standards
    • Organizational structure, IT governance, and IT strategy
    • IT Policies, standards, procedures, and guidelines
    • Enterprise architecture and considerations
    • Enterprise Risk Management (ERM)
    • Privacy program and principles
    • Data management and classification
  • IT management
    • IT resource management
    • Acquisition and management of IT service providers
    • Monitoring and reporting of IT performance
    • Quality assurance and quality management of IT
      
      
• Domain 3 - Acquisition, development, and implementation of information systems (12%)
  • Acquisition and development of Information Systems
    • Project governance and management
    • Business case and feasibility analysis
    • System development methodologies
    • Control identification and design
  • Implementation of Information Systems
    • System readiness and implementation testing
    • Implementation configuration and release management
    • System migration, infrastructure deployment, and data conversion
    • Post-Implementation review
      
      
• Domain 4 - Information systems operations and business resilience (26%)
  • Information systems operations
    • IT components
    • IT asset management
    • Job scheduling and production process automation
    • System interfaces
    • End-user computing and shadow IT
    • System availability and capacity management
    • Problem and incident management
    • IT change, configuration, and patch management
    • Operational log management
    • IT Service level management
    • Database management
  • Business Resilience
    • Business Impact Analysis (BIA)
    • System and operational resilience
    • Data backup, storage, and recovery
    • Business Continuity Plan (BCP)
    • Disaster Recovery Plans (DRP)
      
      
• Domain 5 - Protection of information assets (26%)
  • Security and control of information assets
    • Information asset security policies, frameworks, standards, and guidelines
    • Physical access and environmental controls
    • Identity and access management
    • Network and endpoint security
    • Data loss prevention
    • Data encryption
    • Public Key Infrastructure (PKI)
    • Cloud and virtualized environments
    • Mobile, wireless, and Internet of Things devices
  • Security event management
    • Security awareness training and programs
    • Information systems attack methods and techniques
    • Security testing tools and techniques
    • Security monitoring protocols, tools, and techniques
    • Security incident management
    • Evidence collection and forensics
      
      
• Practice Questions/Review/CISA exam preparation

Objectives:

Target audience:

Do you wish to enhance your professional performance or advance to a new position? Obtaining the title of a CISA will distinguish you from other candidates and provide you with a competitive advantage. The workshop is aimed at anyone who wishes to successfully achieve the CISA certification.

Job titles include:

• IT Professionals
• Auditors
• Internal Auditors and Financial Auditors
• Risk Managers and Consultants

Prerequisites:

To obtain the CISA certification, the following requirements must be met:

• Successful completion of the CISA exam
• Adherence to the ISACA™ Code of Professional Ethics
• Evidence of at least five years of experience in the field of IS/IT audit, control, assurance, or security.

Description:

Other Info: