CISA: Certified Information Systems Auditor

• Prepare for and pass the Certified Information Systems Auditor (CISA) Exam
• Develop and implement a risk-based IT audit strategy in compliance with IT audit standards
• Evaluate the effectiveness of an IT governance structure
• Ensure that the IT organizational structure and human resources (personnel) management support the organization’s strategies and objectives
• Review the information security policies, standards, and procedures for completeness and alignment with generally accepted practices

There are no prerequisite requirements for taking the CISA Exam Preparation Course or the CISA exam; however, in order to apply for CISA certification, the candidate must meet the necessary experience requirements determined by ISACA.

• The CISA designation is for Information Systems Audit professionals who have 5 years of front-line experience with the audit of information systems.
• Example are IS / IT auditors, IT managers, Audit Managers, Security Managers, System Analysts, Consultants, and to some extent CIOs and CTOs.

Module 1: The Process of Auditing Information Systems

• Develop and implement a risk-based IT audit strategy
• Plan specific audits
• Conduct audits in accordance with IT audit standards
• Report audit findings and make recommendations to key stakeholders
• Conduct follow-ups or prepare status reports

Module 2: IT Governance and Management of IT

• Evaluate the effectiveness of the IT governance structure
• Evaluate IT organizational structure and human resources (personnel) management
• Evaluate the organization’s IT policies, standards, and procedures
• Evaluate the adequacy of the quality management system
• Evaluate IT management and monitoring of controls
• Evaluate IT contracting strategies and policies, and contract management practices
• Evaluate risk management practices
• Evaluate the organization’s business continuity plan

Module 3: Information Systems Acquisition, Development, and Implementation

• Evaluate the business case for proposed investments in information
• Evaluate the project management practices and controls
• Conduct reviews to determine whether a project is progressing in accordance with project plans
• Evaluate controls for information systems
• Evaluate the readiness of information systems for implementation and migration into production
• Conduct post implementation reviews of systems

Module 4: Information Systems Operations, Maintenance, and Support

• Conduct periodic reviews of information systems
• Evaluate service level management practices
• Evaluate third-party management practices
• Evaluate data administration practices
• Evaluate the use of capacity and performance monitoring tools and techniques
• Evaluate change, configuration, and release management practices

Module 5: Protection of Information Assets

• Evaluate the information security policies, standards and procedures
• Evaluate the design, implementation, and monitoring of system and logical security
• Evaluate the design, implementation, and monitoring of physical access and environmental control
• Evaluate the processes and procedures used to store, retrieve, transport, and dispose of information assets

CSX-P: Certified Cybersecurity Practitioner

The CSX-P: Certified Cybersecurity Practitioner was named 2016 Top Professional Certification program by the SC Magazine Awards and remains the first and only comprehensive performance certification testing one’s ability to perform globally validated cybersecurity skills spanning five security functions – Identify, Protect, Detect, Respond, and Recover.

CRISC: Certified in Risk and Information Systems Control

This credential demonstrates expertise in identifying and managing enterprise IT risk and implementing and maintaining information systems controls. CRISC can enhance your IT team’s credibility with stakeholders and clients.

CGEIT: Certified in the Governance of Enterprise IT

The Certified in the Governance of Enterprise IT® (CGEIT®) program supports increasing business demands and recognizes the wide range of professionals whose knowledge and application of IT governance principles are key to managing the forces of transition.

CDPSE: Certified Data Privacy Solutions Engineer

The CDPSE: Certified Data Privacy Solutions Engineer course is an intensive, four-day examination preparation program to prepare individuals who are planning to sit for the Certified Data Privacy Solutions Engineer (CDPSE) exam.