CISA — Certified Information Systems Auditor
Work through all five CISA job practice domains with audit case studies drawn from live enterprise engagements.
- 40 contact hours
- 8 weeks
- 5 modules
- 25 seats maximum
About this programme
CISA is the audit credential that moves people from IT operations into assurance and risk work. The programme follows ISACA's five job practice domains, but the teaching is built around real engagement artefacts: audit programmes, control matrices, sampling plans and findings reports, redacted from actual enterprise audits. You will write findings, defend them, and have them challenged the way an audit committee would challenge them.
Who should attend
- IT auditors, security analysts, compliance officers and infrastructure engineers moving into assurance roles.
Prerequisites
- Five years of information systems audit, control or security experience. Waivers are available for up to three years — we walk you through which ones you qualify for.
Curriculum
5 modules, 40 hours of live instruction.
-
Module 1 Information systems auditing process 8 hrs
How an audit is planned, evidenced and reported, using redacted engagement artefacts.
- Audit standards, guidelines and ethics
- Risk-based audit planning
- Sampling and evidence collection
- Writing and defending findings
-
Module 2 Governance and management of IT 7 hrs
Where IT governance breaks down, and what an auditor is expected to notice.
- IT governance frameworks
- Organisational structure and roles
- Policies, standards and procedures
- Enterprise risk management
-
Module 3 Acquisition, development and implementation 8 hrs
Auditing projects and changes while they are still in flight.
- Project governance and benefits realisation
- SDLC controls and testing
- Migration and go-live controls
- Post-implementation review
-
Module 4 Operations and business resilience 9 hrs
The domain with the most day-to-day control testing.
- IT service management and SLAs
- Job scheduling and incident management
- Backup, recovery and BCP/DRP
- Business impact analysis
-
Module 5 Protection of information assets 8 hrs
Security controls from the auditor's seat rather than the engineer's.
- Identity and access management
- Network and endpoint controls
- Encryption and key management
- Incident response and forensics readiness
The exam
150 questions, 240 minutes, computer-based testing at a PSI centre or remotely proctored.
Your trainers
-
Meera Krishnan
CISA, CRISC, CIA
Head of IT Audit, financial services
12 years in the field
Ask about CISA
A counsellor calls you back, usually the same working day.