Chapter 1:
Information System Auditing ProcessPart A: Planning-IS Audit Standards, Guidelines and Code of Ethics-Business Processes-Type of controls
Risk-Based Audit Planning-Types of audits and AssessmentsPart B: Execution-Audit Project Management-Sampling Methodology-Audit Evidence Collection Techniques-Data Analytics-Reporting and communication Techniques-Quality Assurance and Improvement of the Audit ProcessExercises: Multiple Choices Questions from previous CISA sessions (or comparable exams)
Chapter 2:
Governance andManagement of ITPart A: ITGovernance-IT governance and ITStrategy-IT-related frameworks-IT Standards, Policiesand Procedure-Organizational Structure-Enterprise Architecture-Enterprise Risk Management-Maturity Models-Laws, Regulations and Industry Standards Affecting the organizationPart B: IT Management-IT Resource Management-IT Service ProviderAcquisition and Management-IT Performance Monitoring and Reporting-Quality Assurance and Quality Management of ITExercises: Multiple Choices Questions from previous CISA sessions (or comparable exams)
Chapter 3:
Information Systems Acquisition,Development and ImplementationPart A: Information Systems Acquisition and Development-Project Governance and Management-Business Case and Feasibility Analysis-System Development Methodologies-Control Identification and DesignPart B: Information System Implementation-Testing Methodologies-System Migration, Infrastructure Deployment and Data Conversion-Post-implementation Review
Exercises: Multiple Choices Questions from previous CISA sessions (or comparable exams)
Chapter 4:
Information Systems Operations and Business Resilience Part A: Information Systems Operations-Common Technology Components-IT Asset Management-Job Scheduling and Production Process Automation-System interfaces-End-User Computing-Data Governance-System Performance Management-Problem and Incident Management-Change, Configuration, Release and Patch Management-IT Service Level Management-Database ManagementPart B: Business Resilience-Business Impact Analysis-System resiliency-Data Backup, Storage and Restoration-Business Continuity Plan-Disaster Recovery PlanExercise: Multiple Choices Questions from previous CISA sessions (or comparable exams)
Chapter 5:
Protection of Information AssetsPart A: Information Asset Security and Control-Information Asset Security Frameworks, Standard and Guidelines-Privacy Principles-Physical Access and Environmental Controls-Identity and Access Management-Network and Endpoint Security-Data Classification-Data Encryption and Encryption-related Techniques-Public Key Infrastructure-Web-based Communication Technologies-Virtualized environment-Mobile, Wireless and Internet-of-things DevicesPart B: Security Event Management
SecurityAwareness Training and Programs-Information System Attack Methods and Techniques-Security Testing Tools and Techniques-Security Monitoring Tools and Techniques-Incident Response Management-Evidence Collection and ForensicsExercices: Multiple Choices Questions from previous CISA sessions (or comparable exams)Preparation to the Exam
Blank Exam -Partial simulation of the examination carried out at the end of the training.Registration to be made on the site www.isaca.org, the closing of the registrations is done 2 monthsbefore the date of the examination.Presentation of the event: 3hours of multiple choice questions with 150questions to be chosen beforehand in French or in English.
