CISA® Certified Information Systems Auditor

The ISACA® Certified Information Systems Auditor^® (CISA^®) certification is the globally accepted standard of achievement among information systems (IS) audit, control and security professionals. The technical skills and practices that CISA promotes and evaluates are the building blocks of success in the field. Possessing the CISA designation demonstrates proficiency and is the basis for measurement in the profession.

The CISA preparation course provides an intense environment in which participants can acquire, thoroughly and properly, the skills and knowledge expected of a world-class information systems audit, control and security professional. In the process the course provides outstanding preparation for the CISA exam.

Learning outcomes

This course has been independently commissioned with three objectives:

• To provide an in-depth understanding of the tasks and knowledge expected of a world class information systems auditor
• To provide candidates with a clear understanding of the CISA examination and certification processes
• To maximise your prospects at the CISA exam if you choose to sit it

Who should attend

The CISA designation is for Information Systems Audit professionals who have 5 years of front-line experience with the audit of information systems.

Course contents

1.   Achieving   CISA Certification

•   Certification Prerequisites
•   Examination Information
•   Applying for Certification
•   Maintaining Certification

2.   The Process   of Auditing Information Systems

•   Management of the IS Audit function
•   ISACA IS Auditing Standards and Guidelines
•   Risk Analysis
•   Internal Controls
•   Performing an IS Audit
•   Control Self-assessment
•   The Evolving  IS Audit Process

3.   Governance   and Management of IT

•   Corporate Governance
•   IT Governance
•   Information Technology Monitoring and Assurance Practices for Board and Senior Management
•   Information Systems Strategy
•   Maturity and Process Improvement Models
•   IT Investment and Allocation Practices
•   Policies and Procedures
•   Risk Management
•   IS Management Practices
•   IS Organisational Structure and Responsibilities
•   Auditing IT Governance Structure and Implementation
•   Business Continuity Planning
•   Auditing Business Continuity

4.   Information   Systems Acquisition, Development and Implementation

•   Business Realisation
•   Project Management Structure
•   Project Management Practices
•   Business Application Development
•   Business Application Systems
•   Alternative Forms of Software Project Organisation
•   Alternative Development Methods
•   Infrastructure Development / Acquisition Practices
•   Information Systems Maintenance Practices
•   System Development Tools and Productivity Aids
•   Process Improvement Practices
•   Application Controls
•   Auditing Application Controls
•   Auditing Systems Development, Acquisition and Maintenance

5.   Information   Systems Operations, Maintenance and Support

•   Information Systems Operations
•   Information Systems Hardware
•   IS Architecture and Software
•   IS Network Infrastructure
•   Auditing Infrastructure and Operations
•   Disaster Recovery Planning

6.   Protection   of Information Assets

•   Importance of Information Security Management
•   Logical Access
•   Network Infrastructure Security
•   Auditing Information Security Management Framework
•   Auditing Network Infrastructure Security
•   Environmental Exposures and Controls
•   Physical Access Exposures and Controls
•   Mobile Computing

7.   Examination   Administration and Techniques

•   Examination Administration
•   Examination Techniques
•   Frequently Asked Questions

Course fees

Course

Fees A$ Per Person

CISA Certified Information Systems Auditor

Course includes:

• 4 days course presentation with Tier 1 trainer 
• Comprehensive course workbook quality printed in colour
• Official ISACA CISA Review Manual
• 12-month online access to Official ISACA CISA Review Questions, Answers and Explanations Manual

CISA Exam

The CISA exam is set, conducted and marked by ISACA.  All exams will be conduced online via computer-based testing centers around the world.

For more information on how to get the CISA certification and to register for an ISACA exam, please refer to the exams page on the ISACA website:
https://www.isaca.org/certification/pages/exam-registration.aspx 

Check the exam schedule:
https://isacaavailability.psiexams.com/

Exam Registration

You can book your exam with ALC or direct with ISACA (see above).

If you wish to book the exam with ALC and have both course and exam on the one invoice, please indicate “CISA Course + Exam” in the COMMENTS field when making your online registration and select the PAY BY INVOICE option (do not select the Pay By Card option). We will contact you with full details of what is involved.

Prerequisites:

Applicants must meet the following requirements to become CISA Certified:

• Demonstrate the Required Minimum Work Experience: A minimum of 5-years of professional information systems auditing, control or security work experience – as described in the CISA job practice areas – is required for certification. The work experience for CISA certification must be gained within the 10-year period preceding the application date for certification. Candidates have 5-years from the passing date to apply for certification.
  • Substitutions and waivers may be obtained to a maximum of 3 years as follows:
    • A maximum of 1-year of information systems experience OR 1-year of non-IS auditing experience can be substituted for 1-year of experience.
    • 60 to 120 completed university semester credit hours (the equivalent of a 2-year or 4-year degree) not limited by the 10-year preceding restriction, can be substituted for 1 or 2-years, respectively, of experience.
    • A master’s degree in information security or information technology from an accredited university can be substituted for 1-year of experience.

It is important to note that many individuals choose to take the CISA exam prior to meeting the experience requirements. This practice is acceptable although the CISA designation will not be awarded until all requirements are met.

Additional pre-requisite information can be found here.