CISA Certified Information Systems Auditor Course

ISACA awards the Certified Information Systems Auditor certification and lists it among its credentialing programs alongside CISM, CRISC, CGEIT and CDPSE. ISACA designs it for IT and IS auditors and for control, assurance and information security professionals.

Logitrain training includes digital course material and is backed by the price beat guarantee. Candidates can sit the exam at an authorised PSI test centre or online through PSI remote proctoring, and can train in person, in house or live online.

To become certified, ISACA requires candidates to pass the exam and submit an application that demonstrates five or more years of experience in IS or IT audit, control, assurance or security. Experience waivers are available for a maximum of three years.

Candidates have five years from passing the exam to apply for certification. ISACA designs the certification for IT and IS auditors and for control, assurance and information security professionals.

Candidates can achieve this certification by passing the following exam.

CISA, Certified Information Systems Auditor, ISACA certification

Attempt it at an authorised PSI test centre, or online through PSI remote proctoring from a private space with a webcam.

Exam format: 150 multiple choice questions, 4 hours, with a passing score of 450 on a scale of 200 to 800.

Digital course material included for the Certified Information Systems Auditor (CISA) course.

• Covering IS audit standards, guidelines, functions and codes of ethics
• Examining risk-based audit planning and types of audits, assessments and reviews
• Reviewing audit testing, sampling methodology and audit evidence collection techniques
• Covering audit data analytics, reporting and communication techniques
• Examining laws, regulations and industry standards for IT governance
• Reviewing IT strategy, organisational structure, policies, standards and procedures
• Covering enterprise architecture, enterprise risk management, privacy programs and data governance
• Examining IT resource, vendor and performance management
• Reviewing project governance, business case and feasibility analysis
• Covering system development methodologies and control identification and design
• Examining implementation testing, configuration and release management, system migration and post-implementation review
• Covering IT components, asset management, job scheduling, system interfaces and shadow IT
• Reviewing problem, incident, change, configuration and patch management
• Examining operational log management, IT service level management and database management
• Covering business impact analysis, system and operational resilience, backup and restoration, business continuity and disaster recovery plans
• Reviewing information asset security frameworks, physical and environmental controls, and identity and access management
• Covering network and end-point security, data loss prevention, data encryption and public key infrastructure
• Examining cloud and virtualised environments and mobile, wireless and Internet of Things devices
• Reviewing security awareness programs, attack methods, security testing tools and security monitoring tools
• Covering security incident response management, evidence collection and forensics

• IT Auditor
• IS Auditor
• IT Audit Manager
• IT Risk Analyst
• IT Control Analyst
• Assurance Analyst
• Information Security Analyst
• Compliance Analyst
• IT Governance Analyst

Domain 1: Information Systems Auditing Process

• Planning
  • IS Audit Standards, Guidelines, Functions, and Codes of Ethics
  • Types of Audits, Assessments, and Reviews
  • Risk-Based Audit Planning
  • Types of Controls and Considerations
• Execution
  • Audit Project Management
  • Audit Testing and Sampling Methodology
  • Audit Evidence Collection Techniques
  • Audit Data Analytics (including audit algorithms)
  • Reporting and Communication Techniques
  • Quality Assurance and Improvement of Audit Process

Domain 2: Governance and Management of IT

• IT Governance
  • Laws, Regulations, and Industry Standards
  • Organisational Structure, IT Governance, and IT Strategy
  • IT Policies, Standards, Procedures and Practices
  • Enterprise Architecture (EA) and Considerations
  • Enterprise Risk Management (ERM)
  • Privacy Program and Principles
  • Data Governance and Classification
• IT Management
  • IT Resource Management
  • IT Vendor Management
  • IT Performance Monitoring and Reporting
  • Quality Assurance and Quality Management of IT

Domain 3: Information Systems Acquisition, Development, and Implementation

• Information Systems Acquisition and Development
  • Project Governance and Management
  • Business Case and Feasibility Analysis
  • System Development Methodologies
  • Control Identification and Design
• Information Systems Implementation
  • System Readiness and Implementation Testing
  • Implementation Configuration and Release Management
  • System Migration, Infrastructure Deployment, and Data Conversion
  • Post-Implementation Review

Domain 4: Information Systems Operations and Business Resilience

• Information Systems Operations
  • IT Components
  • IT Asset Management
  • Job Scheduling and Production Process Automation
  • System Interfaces
  • Shadow IT and End-User Computing (EUC)
  • Systems Availability and Capacity Management
  • Problem and Incident Management
  • IT Change, Configuration, and Patch Management
  • Operational Log Management
  • IT Service Level Management
  • Database Management
• Business Resilience
  • Business Impact Analysis (BIA)
  • System and Operational Resilience
  • Data Backup, Storage, and Restoration
  • Business Continuity Plan (BCP)
  • Disaster Recovery Plans (DRP)

Domain 5: Protection of Information Assets

• Information Asset Security and Control
  • Information Asset Security Policies, Frameworks, Standards, and Guidelines
  • Physical and Environmental Controls
  • Identity and Access Management
  • Network and End-Point Security
  • Data Loss Prevention (DLP)
  • Data Encryption
  • Public Key Infrastructure (PKI)
  • Cloud and Virtualised Environments
  • Mobile, Wireless, and Internet-of-Things (IoT) Devices
• Security Event Management
  • Security Awareness Training and Programs
  • Information System Attack Methods and Techniques
  • Security Testing Tools and Techniques
  • Security Monitoring Logs, Tools, and Techniques
  • Security Incident Response Management
  • Evidence Collection and Forensics

• Cyber security courses: Logitrain’s cyber security certification courses, including CompTIA, ISC2, EC-Council and Fortinet.

What is the Certified Information Systems Auditor certification?

It is an ISACA certification designed for IT and IS auditors and for control, assurance and information security professionals. It is earned by passing the ISACA exam and meeting ISACA’s application requirements.

Is the exam included in the Certified Information Systems Auditor course?

No. The exam is not included in the course fee and is booked and paid separately through ISACA. Training will help prepare you for the Certified Information Systems Auditor exam.

What experience does the Certified Information Systems Auditor certification require?

ISACA requires five or more years of experience in IS or IT audit, control, assurance or security to become certified, with waivers available for a maximum of three years. You have five years from passing the exam to apply for certification.

What is the current Certified Information Systems Auditor exam version?

The exam follows the exam content outline that ISACA publishes. Check ISACA’s certification page for the current details.

How long is the Certified Information Systems Auditor course?

The length depends on the schedule option chosen. Full-time weekdays, part-time weeknights and part-time weekends are available, and the current duration is shown in the course details on this page.

Where can I do the Certified Information Systems Auditor course?

Melbourne, Sydney, Brisbane, Adelaide, Perth and Canberra, plus live online across Australia. In house training at the client site is also available.

How is the Certified Information Systems Auditor exam taken?

ISACA delivers the exam through PSI, at an authorised PSI test centre or online through PSI remote proctoring.

Which course should I do before the Certified Information Systems Auditor course?

ISACA’s certification requirements are based on work experience rather than on a prerequisite course. The requirements are listed on ISACA’s certification page.