Curso CERTIFIED INFORMATION SYSTEMS AUDITOR (CISA)

This course is designed for auditors and information security professionals who intend to take the Certified Information Systems Auditor (CISA) examination. Recognized internationally, CISA certification is issued by the Information Systems Audit and Control Association (ISACA). The curriculum covers all six of the key domains addressed in the exam: the IS audit process, IT Governance, Systems and Infrastructure Life Cycle Management, IT Service Delivery and Support, Protection of Information Assets, Business Continuity and Disaster Recovery.

At course completation students must be able to:

- Provide IS audit services in accordance with IS audit standards, guidelines, and best practices to assist the organization in ensuring that its information technology and business systems are protected and controlled;

- Provide assurance that the organization has the structure, policies, accountability, mechanisms, and monitoring practices in place to achieve the requirements of corporate governance of IT. Systems and Infrastructure;

- Provide assurance that the management practices for the development/acquisition, testing, implementation, maintenance, and disposal of systems and infrastructure will meet the organization's objectives;

- Provide assurance that the IT service management practices will ensure the delivery of the level of services required to meet the organization´s objectives;

- Provide assurance that the security architecture (policies, standards, procedures, and controls) ensures the confidentiality, integrity, and availability of information assets;

- Provide assurance that in the event of a disruption the business continuity and disaster recovery processes will ensure the timely resumption of IT services while minimizing the business impact.

Candidates and prospective Candidates for the CISA examination and those wishing to expand their knowledge in the field of Information Systems Auditing.

1: Examination presentation, the IS audit process
1.1: Audit standards and guidelines
1.2: Risk analysis and internal control
1.3: Performing an IS audit

2: IT Governance
2.1: IT Governance Strategy
2.2: Policies and Procedures, and Risk management
2.3: IT Governance Practices
2.4: Auditing IT Governance Structure and Implementation

3: Systems and Infrastructure Life Cycle Management
3.1: Project Management: Practices and audit
3.2: Development Practices
3.3: Application Controls
3.4: Auditing Application Controls,
3.5: Auditing Systems Development, Acquisition and Maintenance

4: IT Service Delivery and Support
4.1: Auditing IS Operations
4.2: Auditing IS Hardware
4.3: Auditing IS Architecture and Software

5: Business Continuity and Disaster Recovery
5.1: Business Continuity/Disaster Recovery Planning
5.2: Auditing Business Continuity and Disaster Recovery

6: Protection of Information Assets
6.1: Information Security Management
6.2: Auditing Logical and Physical Security
6.3: Auditing Network Security
6.4: Auditing Mobile Computing