CISA Training | Pentagon Training

Call Us

+44 1344 961530

E-Mail Us

info@pentagonit.co.uk

Introduction
Course Details
Course Content
Enquire

A Quick Glance

Profound knowledge on course technologies, regulation standards and practices
Assured comprehensive course completion containing all five domains
World class CISA training by experienced system auditors
Miniature class size for better interactions
24*7 online support portal to solve your queries

CISA certification is a program made for information security auditing, assurance and security professionals.

Our CISA training thoroughly prepares delegates for CISA certification, which combines the achievement of passing an internationally-respected exam with recognition of the knowledge, skills and experience required to work effectively within Information Security Auditing.

This training course looks at the five main domains of information systems audit, assurance and control as covered by the CISM exam, with an eye to passing first time and achieving this highly-respected certification.

Who should take this course

IS/IT Auditors
IS/IT Consultants
IS/IT Audit Managers
Security Professionals
Non-IT Auditors

Prerequisites

There are no prerequisites to attend the course or take the CISA exam. However, full CISA certification has an experience requirement of a minimum of 5 years of professional information systems auditing, control or security work.

What Will You Learn

Once the course is complete, delegates will be able to understand and perform the following tasks:

Plan reviews to provide value to the organisation and determine if information systems are being protected and controlled.
Carry out follow-ups by preparing status reports to ensure appropriate actions are taken by management promptly.
Achieve planned audit objectives and conduct inspections according to IT audit standards.
Develop operational knowledge of the five domains of CISA.
Formulate and implement a risk-based IT audit strategy based on IT audit standards.
Identify and assess the liabilities, and then report on compliance and institutional controls.
Acquire appropriate knowledge and skills required to remove the CISA certification exam by ISACA.
Understand IS audit and assurance guidelines, standards, and best practices for IS audit, control, and governance of enterprise.

Courseware

Pre Course Material

Certificate

Refreshment

Tutor Support

Certification

Exam(s) included

Course Overview

The ISACA Certified Information Security Manager (CISA) exam is intended to certify the competency of security professionals to assess vulnerabilities, report on compliance and institute controls within the enterprise.

Our 4-day CISA course provides a thorough look at the requirements of the CISA exam, covering in-depth the five information security auditing domains which the exam measures capability in. These are:

Information Systems Auditing Process
Governance and Management of IT
Information Systems Acquisition, Development, and Implementation
Information Systems Operations and Business Resilience
Protection of Information Assets

CISA Exam:

Exam Type: Multiple-choice
Duration: 4 hours
Closed Book Exam

Course Content

Domain 1: Information Systems Audit Process:

Developing a risk-based IT audit strategy
Planning specific audits
Conducting audits to IS audit standards
Implementation of risk management and control practices

Domain 2: IT Governance and Management:

Effectiveness of IT Governance structure
IT organisational structure and human resources (personnel) management
Organisation’s IT policies, standards, and procedures
Adequacy of the Quality Management System
IT management and monitoring controls
IT resource investment
IT contracting strategies and policies
Management of organisations IT-related risks
Monitoring and assurance practices
Organisation business continuity plan

Domain 3: Information Systems Acquisition, Development, and Implementation:

Business case development for IS acquisition, development, maintenance, and retirement
Project management practices and controls
Conducting reviews of project management practices
Controls for requirements, acquisition, development, and testing phases
Readiness for Information Systems
Project Plan Reviewing
Post Implementation System Reviews

Domain 4: Information Systems Operations, Maintenance, and Support:

Conduct periodic reviews of organisations objectives
Service level management
Third party management practices
Operations and end-user procedures
Process of information systems maintenance
Data administration practices determine the integrity and optimisation of databases
Use of capacity and performance monitoring tools and techniques
Problem and incident management practices
Change, configuration, and release management practices
Adequacy of backup and restore provisions
Organisation’s disaster recovery plan in the event of a disaster

Domain 5: Protection of Information Assets:

Information security policies, standards and procedures
Design, implementing, monitoring of system and logical security controls
Design, implementing, monitoring of data classification processes and procedures
Design, implementing, monitoring of physical access and environmental controls
Processes and procedures to store, retrieve, transport and dispose of information assets