CISA - CERTIFIED INFORMATION SYSTEM AUDITOR
Key Data
    |
Course Duration: 3 days Languages: English Format: Instructor-led Course (lectures and workshops)
Student Materials:
1. Student Workbook
2. Student Reference Manual
Certification Exam: CISA® - Certified Information Systems Auditor (CISA)
DESCRIPTION
Since 1978, the Certified Information Systems Auditor (CISA) program has been the globally accepted standard of achievement in the information systems audit, control and security fields. Earning the CISA designation helps assure a positive reputation as a qualified IS audit, control and/or security professional, and because the CISA program certifies individuals who demonstrate proficiency in today's most sought-after skills, employers prefer to hire and retain those who achieve and maintain their designation. There are now over 24,000 CISAs worldwide.
The # 1 Credential of a Professional I.S. Auditor
Our course delves into the unique challenges of planning, managing and executing the audit. You will learn the techniques and gain the knowledge necessary to complete the task. Information Systems auditors go where the financial auditors do not tread - into the operation, design and controls of information systems. Learn how to decode the technical situation and report on compliance using accurate, non-technical facts. Learn how to avoid the common pitfalls so you can remain safe from liability.
CISAs are legally qualified auditors for regulatory compliance under Sarbanes-Oxley (corporations), Gramm-Leach-Biley & FFIEC (both financial), FISMA (government), HIPAA (medical records), SCADA (utilities) and other regulations.
AUDIENCE
- Information security professionals interested in preparing for and understanding the concepts defined in the six CISA® domains as defined by ISACA®
Auditors interested in learning more about the information security field and looking to apply their auditing experience in the field of information assurance- Auditors who are considering the CISA® examination as a method to validate to employers their understanding of core auditing concepts
- Managers, system administrators, or other technical staff members interested in understanding core auditing processes in order to better understand their role in internal self-assessment audits
- Chartered Accounts / Management Consultants – who regularly are involved in cross business activities and advise clients on areas of business that are directly affected by the kinds of risk CISA covers.
CISA REQUIREMENTS
- Successfully completing the CISA® examination
- A minimum of 5 years of professional experience in auditing, control, or security work
- Agreement with a Code of Professional Ethics
- Maintaining approved Continuing Professional Education (CPE) credits
- Adherence to the Information Systems Auditing Standards as defined by ISACA®
PARTICIPATION
The participant is expected to participate in the workgroup sessions to extract the greatest value from this program.
COURSE STRUCTURE
The focus of this course is the six content areas (domains) that are outlined each year by ISACA® and students will have the opportunity to interact with Mile2 Certified Instructors who are certified as a CISA®, CISM®, CISSOTM, CISSP® and/or IRCA BS7799 Auditor® with extensive relevant experience. And while many training programs focus on simply presenting the information to students, our instructors are committed to mentoring participants in order to ensure that participants understand the information, can apply it to their professional careers, and can use that information to pass the CISA® examination.
COURSE DELIVERY
- 75% instructor-led live classroom with 25% Content Retention Exercises
- Interactive workshop style – you are constantly involved
- Questions are actively encouraged
- Personal attention to your individual learning needs
- Role-playing scenario exercises and practice games
- Hands-on involved learning- not a slide show
SKILLS GAINED
At the end of the course the participant will have the information necessary to undertake:
- Audit Basics - Introduction, Administrative, Penalties, Related organizations, Terminology, Preventing auditor liability issues.
- Audit Charter - Authority, Standards, and Responsibilities.
- Applicable GAAP and SAS Audit Standards - The 1 to 101 standards which apply to all I.S. audits. If you think only SAS-70 and SAS-94 are applicable, then you really need this class.
- Specific Audit Plan for all Internal Control Audits. We created a written plan to help you learn practical application of I.S. audit. ISACA makes vague mention at best whereas our programme will provide you a template of specific audit questions with our written audit plan and teach you how to apply these tools at your job.
- Regulatory Compliance Requirements - Sarbanes-Oxley, Gramm-Leach-Bliley and FFIEC (financial), FISMA (government), HIPAA (medical records), Basel II (banking), ISO (international), Internet & Business Partner security policies, Compliance mapping, Multinational/Trans-border regulations.
- Privacy and Reporting Rules - Key concept, Issues, Terminology, Parties impacted, Minimums, Acceptable disclosure, Auditor duties.
- Risk Management - Corporate Executives, Board level, Acceptable auditor interactions, I.S. Management, Staff, Third parties. We include a brief segment on managing projects using the methodology of the Project Management Institute.
- Technical Infrastructure - Encryption, Technical mechanisms, Acceptable standards, Administrative procedures, Physical safeguards, Technical services, Security management.
- Disaster Recovery and Business Continuity - DR & BC subjects well above the hotsite and tape backup level, Risk & Business Impact Analysis, Success Indicators, Critical success factors. We use the full indoctrination segment from our business continuity course to ensure you learn more than terminology and definitions. Learn how the process really works and how you can apply it for yourself.
- Business Applications - E-Business, ERP, MRP, Financials, Process management, Planning & Acquisition, Security compliance, Assuring integrity of transaction records, Personal liability.
- CISA Final Subject Review - Facts, Rules, Modifications, Standards, Resources
- Our recommended study plan and test taking techniques
