Certified Information Systems Auditor (CISA)
$599.00
CISA training for IT auditors, risk and compliance staff preparing for the ISACA Certified Information Systems Auditor exam. 12 hours 48 minutes across 74 videos, plus 55 questions.
- Login details sent straight after payment
- Self-paced. Study on any device
- StemBoss Certificate of Completion
- 14-day refund promise
Secure checkout. Pay by card, Apple Pay or Google Pay.
This Certified Information Systems Auditor (CISA) course prepares you for the ISACA CISA exam. It is for IT auditors, compliance officers and security staff who check that IT systems are well run, safe and meet the rules. You get 12 hours 48 minutes of training in 74 videos, with 55 test questions to check your progress.
What you will learn
- Plan and run an IT audit using recognised standards and guidelines
- Use the COBIT model to judge IT governance
- Gather audit evidence and evaluate internal controls
- Review how systems are bought, built, tested and maintained
- Check IT service delivery, patching and incident management
- Assess access controls, encryption, firewalls, VPNs and intrusion detection
- Judge physical and environmental security
- Review business continuity and disaster recovery plans
Course outline
- The audit process: audit standards and guidelines, the COBIT model, audit management, internal controls, planning, evidence and control self-assessment
- Audit governance and compliance: IT governance, security policies, outsourcing, compliance, IT strategy and performance
- System infrastructure, project management and testing: requirements, project tools, Agile development, acquisition, testing, maintenance and data conversion
- Media disposal, reviews and system maintenance: safe disposal of media, post-implementation and periodic reviews
- IT service level management: service delivery, operations, databases and SQL, performance monitoring, patch and incident management, hardware and network parts
- Auditor technical overview: security design, attacks, cryptography, certificates, access control, physical and environmental security, network security devices, wireless risks and the OSI model
- Business continuity and disaster recovery: continuity planning, fault tolerance and regulations
The course takes an auditor’s point of view throughout. You learn what good controls look like and what evidence to ask for. It also shows how to report findings so managers can act on them.
Who this course is for
- IT auditors and internal auditors
- Compliance and risk management officers
- Security professionals who work with auditors
- IT managers and consultants
- System administrators and network engineers moving into audit
Before you start
This is an advanced course. You will get the most from it if you already work in IT, audit, risk or security. There is no formal entry rule for the exam. However, ISACA only awards the CISA certification once you can show around five years of work experience in information systems audit, control or security. Check ISACA’s website for the full rules and any allowed substitutions.
About the CISA exam
The CISA certification is issued by ISACA, a global body for IT governance, audit and assurance. It shows that you can audit, monitor and assess IT and business systems using a risk-based approach. The exam covers five areas: the information systems auditing process; governance and management of IT; information systems acquisition, development and implementation; information systems operations and business resilience; and protection of information assets. Check ISACA’s website for the latest exam details before you book.
Jobs this course supports
- IT auditor
- IT audit manager
- Internal auditor
- Compliance manager
- Risk management consultant
- IT governance specialist
- Information security analyst
| Skill level | Advanced |
|---|---|
| Duration | 12 Hours 48 Minutes |
| Videos | 74 Course Videos |
| Questions | 55 Test Questions |
| Certification | Certified Information Systems Auditor (CISA) |
| Certification body | ISACA |
| Prerequisites | Some IT, audit or security work experience. ISACA requires proven work experience to award the certification. |
| Best for | IT auditors, internal auditors, compliance and risk officers, security professionals, IT managers and consultants |
| Topics covered | Audit process, IT governance, systems development and testing, service management, security controls, cryptography, business continuity |
| Format | Online video lessons, self-paced |
| Language | English |
| Closed captions | Yes |
| Certificate | StemBoss Certificate of Completion |
What is inside this course
7 modules and 74 lessons. Here is the full outline.
Module 1 - The Audit Process12 lessons
- Introduction
- Audit Process
- Auditing Standards
- Auditing Guidelines
- Cobit Model
- Audit Management
- Internal Control Classifications
- Planning
- Program
- Evidence
- Audit Control Evaluation
- CSA Control Self-Assessment
Module 2 - Audit Governance and Compliance7 lessons
- IT Governance
- Governance & Security Policies
- Outsourcing & Governance
- Outsourcing & Globalization
- Organizational Compliance
- IT Strategy
- IT Performance
Module 3 - System Infrastructure, Project Management, and Testing11 lessons
- System & Infrastructure
- Requirements
- Project Management Tools - Part 1
- Project Management Tools - Part 2
- Applications
- Agile Development
- Monitoring & Controlling
- Acquisition Process
- Testing Process
- Information Systems Maintenance Practices
- Data Conversion Tools
Module 4 - Media Disposal, Reviews, and System Maintenance4 lessons
- Media Disposal Process
- Post Implementation Review
- Periodic Review
- System Maintenance
Module 5 - IT Service Level Management11 lessons
- IT Service Delivery and Support
- How to Evalutate Service Level Management Practices
- Operations Management
- Databases
- Structured Query Language (SQL)
- Monitoring Performance
- Source Code and Perfomance Monitoring
- Patch Management
- Incident Management
- Hardware Component Types
- Network Component Types
Module 6 - Auditor Technical Overview26 lessons
- IS Auditor Technical Overview
- Security Design
- Monitoring Systems
- Types of Attacks
- Cryptography
- Encryption
- Asymmetric Encryption
- Digital Certificate
- Different Kinds of Attacks
- Access Controls
- Identification and Authenication
- Physical Access Exposure
- Environmental Security
- Network Security Devices and Network Components
- Network Address Translation
- Virtual Private Networks (VPNs)
- Voice System Risks
- Intrusion Detection
- Firewalls
- Firewall Implementation
- Network Access Protection
- HoneyPot
- Risks to Portable and Wireless Devices
- Bluetooth
- OSI Networking
- Managing Data
Module 7 - Business Continuity and Disaster Recovery3 lessons
- Business Continuity and Disaster Recovery
- Fault Tolerance
- Business Continuity and Disaster Recovery Regulations
Your learning path
Where Certified Information Systems Auditor (CISA) fits. Build your skills one step at a time.
Frequently asked questions
Who issues the CISA certification?
CISA is issued by ISACA, a global association for IT governance, audit and assurance.
What are the five CISA exam areas?
The information systems auditing process; governance and management of IT; information systems acquisition, development and implementation; information systems operations and business resilience; and protection of information assets.
Do I need work experience to become CISA certified?
You can sit the exam without it, but ISACA only awards the certification once you prove relevant work experience, usually around five years in IS audit, control or security.
Does this CISA course cover technical security topics?
Yes. A full module covers attacks, cryptography, certificates, access control, firewalls, VPNs, intrusion detection and wireless risks from an auditor's point of view.
How long is the CISA course?
It runs for 12 hours 48 minutes across 74 videos, with 55 test questions.
Do I get a certificate?
Yes. You get a StemBoss Certificate of Completion when you finish the course.
Can I get a refund?
Yes, within 14 days if you have completed less than 20% of the course. See our refund policy for details. Read the refund policy.
