CISA – Certified Information Systems Auditor – Exams in 2024

CISA – Certified Information Systems Auditor

Certified Information Security Auditor (CISA) is a globally acknowledged certification, which builds upon the previous experience of IS professionals, to produce valuable employees who possess exceptional knowledge of Information Systems Auditing, Control, and Security.

CISA EXAM SYLLABUS

18% DOMAIN 1 – INFORMATION SYSTEMS AUDITING PROCESS

18% DOMAIN 2 – GOVERNANCE & MANAGEMENT OF IT

12% DOMAIN 3 – INFORMATION SYSTEMS ACQUISITION, DEVELOPMENT & IMPLEMENTATION

26% DOMAIN 4 – INFORMATION SYSTEMS OPERATIONS & BUSINESS RESILIENCE

26% DOMAIN 5 – PROTECTION OF INFORMATION ASSETS

The Process of Auditing Information Systems

In this section, I’m going to help you understand all that is in Domain 1. The first domain covers how IT auditors provide services in accordance with IT audit standards, in order to assist the organization in protecting and controlling information systems. This section talks about the audit charter and what it contains, and steps for audit planning.

Governance and Management of IT

In this section, I’m going to tell you all about Domain 2. The second domain covers how IT auditors provide assurance that necessary organizational structure and processes are in place. It also contains sections from the Business Continuity section that used to be in the old Domain 6 before they got rid of it.

IS Acquisition, Development, and Implementation

The third domain covers how IT auditors provide assurance that the practices for the acquisition, development, testing, and implementation of IS meet the organization’s strategies and objectives. There are going to be a lot of topics surrounding project management and business management/realization in this section.

IS Operations, Maintenance, and Support

What is Domain 4 all about? Well, you need to provide assurance that the processes for information systems operations, maintenance, and support meet the organization’s strategies and objectives. There are sections on disaster recovery and it’s important to know what to do in the event of data loss, what is acceptable data loss, and how to manage these issues, among other things.’

Protection of Information Assets

In this section, I’m going to tell you more about the last and 5th domain. The last domain covers how IT auditors provide assurance that the organization’s security policies, standards, procedures, and controls ensure the confidentiality, integrity, and availability of information assets. This is a very important Domain in the CISA syllabus.

Key Takeaways

• The CISA exam consists of 150 multiple-choice questions.

• Duration is 4 hours (240 minutes)

• The exam covers five distinct job practice domains.

• Raw scores are converted to a scaled score between 200-800.

• Thorough understanding of each domain’s content is crucial for success.

Rating Distribution

• 1 stars: 0 votes
• 2 stars: 0 votes
• 3 stars: 0 votes
• 4 stars: 0 votes
• 5 stars: 1 votes

Frequently Asked Questions

How long do I have access to the course materials?

You can view and review the lecture materials indefinitely, like an on-demand channel.

Can I take my courses with me wherever I go?

Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don’t have an internet connection, some instructors also let their students download course lectures. That’s up to the instructor though, so make sure you get on their good side!