CISA Training By Corvit

CISA Course Outline

**Domain 1: Information System Auditing Process**

1.1. The IS Audit Planning Process

– Understand the purpose and value of IT audits

– Develop an IT audit strategy and plan

– Conduct risk assessments

1.2. IT Governance and Management

– Evaluate IT governance structures and processes

– Assess IT organizational structures and responsibilities

– Understand IT policies, standards, and procedures

1.3. IS Audit Risk Assessment

– Identify and assess information systems vulnerabilities

– Evaluate the impact of vulnerabilities and threats

– Determine risk mitigation strategies

**Domain 2: IT Governance and Management**

2.1. IT Governance

– Understand the framework and components of IT governance

– Evaluate IT governance practices

– Assess the effectiveness of IT governance

2.2. IT Management and Support

– Evaluate IT organizational structure and responsibilities

– Review IT policies, standards, and procedures

– Assess IT human resources management

2.3. IT Organizational Structure and Implementation

– Understand IT organizational structures

– Evaluate the implementation of IT strategies and policies

– Review IT project management and support practices

**Domain 3: Information Systems Acquisition, Development, and Implementation**

3.1. Business Continuity Planning and Disaster Recovery Planning

– Understand business continuity and disaster recovery planning

– Assess the adequacy of business continuity and disaster recovery plans

– Evaluate testing and maintenance of plans

3.2. Information Systems Acquisition and Development

– Evaluate the acquisition and development of information systems

– Assess project management practices

– Review system development methodologies

3.3. Information Systems Maintenance and Service Management

– Evaluate the maintenance and support of information systems

– Assess data quality and data management practices

– Understand service level management

**Domain 4: Information Systems Operations and Business Resilience**

4.1. Information Systems Operations

– Evaluate the use of IT resources

– Assess IT service management practices

– Understand system performance management

4.2. Information Security Management

– Evaluate information security policies and procedures

– Assess the design and implementation of security controls

– Understand the principles of business continuity and disaster recovery

4.3. Business Resilience

– Assess business continuity and disaster recovery plans

– Understand and evaluate business impact analysis

**Domain 5: Protection of Information Assets**

5.1. Information Asset Security Framework and Risk Management

– Understand the principles of information asset security

– Assess information classification and ownership

– Evaluate information security governance and risk management

5.2. Information Asset Security

– Evaluate information security policies and standards

– Assess the design and implementation of information security controls

– Understand information security awareness and training programs