====== Certified Information Systems Auditor (CISA) certification program ======



The Certified Information Systems Auditor (CISA) certification program covers a range of topics related to auditing, control, assurance, and governance of information systems. Here's a general overview of what you might expect to learn in a CISA course:

1. **Introduction to Information Systems Auditing**
   - [[products:ict:cisa:introduction_to_information_systems_auditing:overview_of_information_systems_auditing|Overview of information systems auditing]]
   - [[products:ict:cisa:introduction_to_information_systems_auditing:role_and_responsibilities_of_is_auditors|Role and responsibilities of IS auditors]]
   - [[products:ict:cisa:introduction_to_information_systems_auditing:professional_standards_and_guidelines_for_is_auditing|Professional standards and guidelines for IS auditing]]

2. **Governance and Management of IT**
   - [[products:ict:cisa:governance_and_management_of_it:it_governance_frameworks_and_principles|IT governance frameworks and principles]]
   - [[products:ict:cisa:governance_and_management_of_it:it_strategy_policies_and_procedures|IT strategy, policies, and procedures]]
   - [[products:ict:cisa:governance_and_management_of_it:organizational_structures_and_roles_in_it_governance|Organizational structures and roles in IT governance]]

3. **Information Systems Acquisition, Development, and Implementation**
   - [[products:ict:cisa:information_systems_acquisition_development_and_implementation:project_management_methodologies|Project management methodologies]]
   - [[products:ict:cisa:information_systems_acquisition_development_and_implementation:systems_development_life_cycle_sdlc|Systems development life cycle (SDLC)]]
   - [[products:ict:cisa:information_systems_acquisition_development_and_implementation:acquisition_and_development_controls|Acquisition and development controls]]

4. **Information Systems Operations, Maintenance, and Support**
   - [[products:ict:cisa:information_systems_operations_maintenance_and_support:it_service_management_itsm_frameworks|IT service management (ITSM) frameworks (e.g., ITIL)]]
   - [[products:ict:cisa:information_systems_operations_maintenance_and_support:change_management_and_configuration_management|Change management and configuration management]]
   - [[products:ict:cisa:information_systems_operations_maintenance_and_support:incident_management_and_problem_management|Incident management and problem management]]

5. **Protection of Information Assets**
   - [[products:ict:cisa:protection_of_information_assets:information_security_concepts_and_principles|Information security concepts and principles]]
   - [[products:ict:cisa:protection_of_information_assets:access_controls_and_authentication_mechanisms|Access controls and authentication mechanisms]]
   - [[products:ict:cisa:protection_of_information_assets:encryption_and_cryptography|Encryption and cryptography]]

6. **Risk Management and Compliance**
   - [[products:ict:cisa:risk_management_and_compliance:risk_management_frameworks_and_methodologies|Risk management frameworks and methodologies]]
   - [[products:ict:cisa:risk_management_and_compliance:compliance_requirements_and_regulations|Compliance requirements and regulations (e.g., GDPR, HIPAA, SOX)]]
   - [[products:ict:cisa:risk_management_and_compliance:internal_control_frameworks|Internal control frameworks (e.g., COSO, COBIT)]]

7. **Business Continuity and Disaster Recovery**

[[products:ict:reliability:business_continuity:testing_and_maintenance_of_business_continuity_and_disaster_recovery_plans|]]
   - [[products:ict:cisa:business_continuity_and_disaster_recovery:business_impact_analysis_bia|Business impact analysis (BIA)]]

[[products:ict:reliability:business_continuity:testing_and_maintenance_of_business_continuity_and_disaster_recovery_plans|]]
   - [[products:ict:cisa:business_continuity_and_disaster_recovery:business_continuity_planning_bcp_and_disaster_recovery_planning_drp|Business continuity planning (BCP) and disaster recovery planning (DRP)]]
   - [[products:ict:cisa:business_continuity_and_disaster_recovery:testing_and_maintenance_of_business_continuity_and_disaster_recovery_plans|Testing and maintenance of business continuity and disaster recovery plans]]

8. **Auditing Tools and Techniques**
   - [[products:ict:cisa:auditing_tools_and_techniques:audit_planning_and_risk_assessment|Audit planning and risk assessment]]
   - [[products:ict:cisa:auditing_tools_and_techniques:audit_sampling_methodologies|Audit sampling methodologies]]
   - [[products:ict:cisa:auditing_tools_and_techniques:audit_evidence_collection_and_documentation|Audit evidence collection and documentation]]

9. **Reporting and Communication**
   - [[products:ict:cisa:reporting_and_communication:audit_findings_and_recommendations|Audit findings and recommendations]]
   - [[products:ict:cisa:reporting_and_communication:audit_reports_and_communication_with_stakeholders|Audit reports and communication with stakeholders]]
   - [[products:ict:cisa:reporting_and_communication:follow_up_and_monitoring_of_audit_recommendations|Follow-up and monitoring of audit recommendations]]

10. **Ethics and Professional Conduct**
    - [[products:ict:cisa:ethics_and_professional_conduct:professional_ethics_for_is_auditors|Professional ethics for IS auditors]]
    - [[products:ict:cisa:ethics_and_professional_conduct:confidentiality_integrity_and_objectivity|Confidentiality, integrity, and objectivity]]
    - [[products:ict:cisa:ethics_and_professional_conduct:ethical_dilemmas_and_responsibilities|Ethical dilemmas and responsibilities]]

The course also includes practice exams, case studies, and real-world scenarios to help students apply their knowledge and prepare for the CISA certification exam. Instructors can also incorporate guest lectures, workshops, or hands-on exercises to enhance the learning experience.