ISACA CISA course and certification

OVERVIEW

The goal of our 4 day accelerated Program for CISA Certification is to equip information professionals with the knowledge and technical skills for proficiency in IS audit, control and security skills.

The technical skills and practices that CISA promotes and evaluates are the building blocks of success in the field. Possessing the CISA designation demonstrates proficiency and is the basis for measurement in the profession. With a growing demand for professionals possessing IS audit, control and security skills, CISA has become a preferred certification program by individuals and organisations around the world.

Get your ISACA CISA training in just 4 days and learn more than you could imagine.

At Readynez, we know your time is valuable. That’s why we give you the opportunity to gain your CISA training in just 4 days. We provide the best conditions for you to learn.

With us by your side, encouraging and guiding you along the way, you can enjoy 4 intense, focused days of quality learning in a distraction free environment. Your expert instructor will be working with Readynez's unique accelerated learning methods, which include our exclusive lecture/lab/review methodology with real life cases putting you in the best possible position to learn and retain knowledge and pass your exams.

Sitting your CISA course and certification with Readynez means:

You'll get more hours of training per day, allowing you to get CISA trained faster and more cost-effectively than with any other training provider.
You will be trained by one of the most expert instructors in the world.
You can focus purely on learning in our distraction free environment.
Dedicated onsite support and access to your classroom at all hours.
The price you pay is all-inclusive and covers all course materials, transportation service, accommodation and meals.
The Certification Guarantee allows you to train again for free, if you do not pass first time. You only pay for any exams and labs, and accommodation.

READ FULL CURRICULUM

Course summary

Course

ISACA CISA Certification

Duration

4 days

Dates available

2. Sep – 5. Sep, 2019 - Open seats

Certification

ISACA: Certified Information Systems Auditor (CISA)

Exams

Certified Information Systems Auditor (CISA)

Get Price

Your Package includes:

Transport Service
Accommodation
Meals
44 Hours of instructor led training
Materials for the course
Exam
Certification Guarantee

ISACA CISA certification

We have designed our course material in the way that best prepares you to learn and pass your exam.

During this accelerated course, you'll get instructor-led training to ensure that you learn the fundamentals, obtain hands-on skills and earn your certification.

The course curriculum prepares you for this latest CISA exam:

Domain 1—The Process of Auditing Information Systems (21%)
Domain 2—Governance and Management of IT (16%)
Domain 3—Information Systems Acquisition, Development and Implementation (18%)
Domain 4—Information Systems Operations, Maintenance and Support (20%)
Domain 5—Protection of Information Assets (25%)

Domain 1 - The Process of Auditing Information Systems (21%)

Provide audit services in accordance with IS audit standards to assist the organization in protecting and controlling information systems.

Domain 1 - Task Statements:

1.1 Execute a risk-based IS audit strategy in compliance with IS audit standards to ensure that key risk areas are audited.
1.2 Plan specific audits to determine whether information systems are protected, controlled and provide value to the organization.
1.3 Conduct audits in accordance with IS audit standards to achieve planned audit objectives.
1.4 Communicate audit results and make recommendations to key stakeholders through meetings and audit reports to promote change when necessary.
1.5 Conduct audit follow-ups to determine whether appropriate actions have been taken by management in a timely manner.

Domain 1 - Knowledge Statements:

1.1 Knowledge of ISACA IT Audit and Assurance Standards, Guidelines and Tools and Techniques, Code of Professional Ethics and other applicable standards
1.2 Knowledge of the risk assessment concepts and tools and techniques used in planning, examination, reporting and follow-up
1.3 Knowledge of fundamental business processes (e.g., purchasing, payroll, accounts payable, accounts receivable) and the role of IS in these processes
1.4 Knowledge of the control principles related to controls in information systems
1.5 Knowledge of risk-based audit planning and audit project management techniques, including follow-up
1.6 Knowledge of the applicable laws and regulations that affect the scope, evidence collection and preservation, and frequency of audits
1.7 Knowledge of the evidence collection techniques (e.g., observation, inquiry, inspection, interview, data analysis, forensic investigation techniques, computer-assisted audit techniques [CAATs]) used to gather, protect and preserve audit evidence
1.8 Knowledge of different sampling methodologies and other substantive/data analytical procedures
1.9 Knowledge of reporting and communication techniques (e.g., facilitation, negotiation, conflict resolution, audit report structure, issue writing, management summary, result verification)
1.10 Knowledge of audit quality assurance (QA) systems and frameworks
1.11 Knowledge of various types of audits (e.g., internal, external, financial) and methods for assessing and placing reliance on the work of other auditors or control entities

Domain 2 - Governance and Management of IT (16%)

Provide assurance that the necessary leadership and organizational structures and processes are in place to achieve objectives and to support the organization's strategy.

Domain 2 - Task Statements:

2.1 Evaluate the IT strategy, including IT direction, and the processes for the strategy’s development, approval, implementation and maintenance for alignment with the organization’s strategies and objectives.
2.2 Evaluate the effectiveness of the IT governance structure to determine whether IT decisions, directions and performance support the organization’s strategies and objectives.
2.3 Evaluate IT organizational structure and human resources (personnel) management to determine whether they support the organization’s strategies and objectives.
2.4 Evaluate the organization’s IT policies, standards and procedures, and the processes for their development, approval, release/publishing, implementation and maintenance to determine whether they support the IT strategy and comply with regulatory and legal requirements.
2.5 Evaluate IT resource management, including investment, prioritization, allocation and use, for alignment with the organization’s strategies and objectives.
2.6 Evaluate IT portfolio management, including investment, prioritization and allocation, for alignment with the organization’s strategies and objectives.
2.7 Evaluate risk management practices to determine whether the organization’s IT-related risk is identified, assessed, monitored, reported and managed.
2.8 Evaluate IT management and monitoring of controls (e.g., continuous monitoring, quality assurance [QA]) for compliance with the organization’s policies, standards and procedures.
2.9 Evaluate monitoring and reporting of IT key performance indicators (KPIs) to determine whether management receives sufficient and timely information.
2.10 Evaluate the organization’s business continuity plan (BCP), including alignment of the IT disaster recovery plan (DRP) with the BCP, to determine the organization’s ability to continue essential business operations during the period of an IT disruption.

Domain 2 - Knowledge Statements:

2.1 Knowledge of the purpose of IT strategy, policies, standards and procedures for an organization and the essential elements of each
2.2 Knowledge of IT governance, management, security and control frameworks, and related standards, guidelines and practices
2.3 Knowledge of the organizational structure, roles and responsibilities related to IT, including segregation of duties (SoD)
2.4 Knowledge of the relevant laws, regulations and industry standards affecting the organization
2.5 Knowledge of the organization’s technology direction and IT architecture and their implications for setting long-term strategic directions
2.6 Knowledge of the processes for the development, implementation and maintenance of IT strategy, policies, standards and procedures
2.7 Knowledge of the use of capability and maturity models
2.8 Knowledge of process optimization techniques
2.9 Knowledge of IT resource investment and allocation practices, including prioritization criteria (e.g., portfolio management, value management, personnel management)
2.10 Knowledge of IT supplier selection, contract management, relationship management and performance monitoring processes, including third-party outsourcing relationships
2.11 Knowledge of enterprise risk management (ERM)
2.12 Knowledge of the practices for monitoring and reporting of controls performance (e.g., continuous monitoring, quality assurance [QA])
2.13 Knowledge of quality management and quality assurance (QA) systems
2.14 Knowledge of the practices for monitoring and reporting of IT performance (e.g., balanced scorecard [BSC], key performance indicators [KPIs])
2.15 Knowledge of business impact analysis (BIA)
2.16 Knowledge of the standards and procedures for the development, maintenance and testing of the business continuity plan (BCP)
2.17 Knowledge of the procedures used to invoke and execute the business continuity plan (BCP) and return to normal operations

Domain 3 - Information Systems Acquisition, Development and Implementation (18%)

Provide assurance that the practices for the acquisition, development, testing and implementation of information systems meet the organization’s strategies and objectives.

Domain 3 - Task Statements:

3.1 Evaluate the business case for the proposed investments in information systems acquisition, development, maintenance and subsequent retirement to determine whether the business case meets business objectives.
3.2 Evaluate IT supplier selection and contract management processes to ensure that the organization’s service levels and requisite controls are met.
3.3 Evaluate the project management framework and controls to determine whether business requirements are achieved in a cost-effective manner while managing risk to the organization.
3.4 Conduct reviews to determine whether a project is progressing in accordance with project plans, is adequately supported by documentation, and has timely and accurate status reporting.
3.5 Evaluate controls for information systems during the requirements, acquisition, development and testing phases for compliance with the organization's policies, standards, procedures and applicable external requirements.
3.6 Evaluate the readiness of information systems for implementation and migration into production to determine whether project deliverables, controls and the organization's requirements are met.
3.7 Conduct post-implementation reviews of systems to determine whether project deliverables, controls and the organization's requirements are met.

Domain 3 - Knowledge Statements:

3.1 Knowledge of benefits realization practices, (e.g., feasibility studies, business cases, total cost of ownership [TCO], return on investment [ROI])
3.2 Knowledge of IT acquisition and vendor management practices (e.g., evaluation and selection process, contract management, vendor risk and relationship management, escrow, software licensing), including third-party outsourcing relationships, IT suppliers and service providers.
3.3 Knowledge of project governance mechanisms (e.g., steering committee, project oversight board, project management office)
3.4 Knowledge of project management control frameworks, practices and tools
3.5 Knowledge of the risk management practices applied to projects
3.6 Knowledge of requirements analysis and management practices (e.g., requirements verification, traceability, gap analysis, vulnerability management, security requirements)
3.7 Knowledge of the enterprise architecture (EA) related to data, applications and technology (e.g., web-based applications, web services, n-tier applications, cloud services, virtualization)
3.8 Knowledge of system development methodologies and tools, including their strengths and weaknesses (e.g., agile development practices, prototyping, rapid application development [RAD], object-oriented design techniques, secure coding practices, system version control)
3.9 Knowledge of the control objectives and techniques that ensure the completeness, accuracy, validity and authorization of transactions and data
3.10 Knowledge of the testing methodologies and practices related to the information system development life cycle (SDLC)
3.11 Knowledge of the configuration and release management relating to the development of information systems
3.12 Knowledge of system migration and infrastructure deployment practices and data conversion tools, techniques and procedures.
3.13 Knowledge of project success criteria and project risk
3.14 Knowledge of post-implementation review objectives and practices (e.g., project closure, control implementation, benefits realization, performance measurement)

Domain 4 - Information Systems Operations, Maintenance and Service Management (20%)

Provide assurance that the processes for information systems operations, maintenance and service management meet the organization’s strategies and objectives.

Domain 4 - Task Statements:

4.1 Evaluate the IT service management framework and practices (internal or third party) to determine whether the controls and service levels expected by the organization are being adhered to and whether strategic objectives are met.
4.2 Conduct periodic reviews of information systems to determine whether they continue to meet the organization’s objectives within the enterprise architecture (EA).
4.3 Evaluate IT operations (e.g., job scheduling, configuration management, capacity and performance management) to determine whether they are controlled effectively and continue to support the organization’s objectives.
4.4 Evaluate IT maintenance (patches, upgrades) to determine whether they are controlled effectively and continue to support the organization’s objectives.
4.5 Evaluate database management practices to determine the integrity and optimization of databases.
4.6 Evaluate data quality and life cycle management to determine whether they continue to meet strategic objectives.
4.7 Evaluate problem and incident management practices to determine whether problems and incidents are prevented, detected, analyzed, reported and resolved in a timely manner to support the organization´s objectives.
4.8 Evaluate change and release management practices to determine whether changes made to systems and applications are adequately controlled and documented.
4.9 Evaluate end-user computing to determine whether the processes are effectively controlled and support the organization’s objectives.
4.10 Evaluate IT continuity and resilience (backups/restores, disaster recovery plan [DRP]) to determine whether they are controlled effectively and continue to support the organization’s objectives.

Domain 4 - Knowledge Statements:

4.1 Knowledge of service management frameworks
4.2 Knowledge of service management practices and service level management
4.3 Knowledge of the techniques for monitoring third-party performance and compliance with service agreements and regulatory requirements
4.4 Knowledge of enterprise architecture (EA)
4.5 Knowledge of the functionality of fundamental technology (e.g., hardware and network components, system software, middleware, database management systems)
4.6 Knowledge of system resiliency tools and techniques (e.g., fault-tolerant hardware, elimination of single point of failure, clustering)
4.7 Knowledge of IT asset management, software licensing, source code management and inventory practices
4.8 Knowledge of job scheduling practices, including exception handling
4.9 Knowledge of the control techniques that ensure the integrity of system interfaces
4.10 Knowledge of capacity planning and related monitoring tools and techniques
4.11 Knowledge of systems performance monitoring processes, tools and techniques (e.g., network analyzers, system utilization reports, load balancing)
4.12 Knowledge of data backup, storage, maintenance and restoration practices
4.13 Knowledge of database management and optimization practices
4.14 Knowledge of data quality (completeness, accuracy, integrity) and life cycle management (aging, retention)
4.15 Knowledge of problem and incident management practices
4.16 Knowledge of change management, configuration management, release management and patch management practices
4.17 Knowledge of the operational risk and controls related to end-user computing
4.18 Knowledge of the regulatory, legal, contractual and insurance issues related to disaster recovery
4.19 Knowledge of business impact analysis (BIA) related to disaster recovery planning
4.20 Knowledge of the development and maintenance of disaster recovery plans (DRPs)
4.21 Knowledge of the benefits and drawbacks of alternate processing sites (e.g., hot sites, warm sites, cold sites)
4.22 Knowledge of disaster recovery testing methods
4.23 Knowledge of the processes used to invoke the disaster recovery plans (DRPs)

Domain 5—Protection of Information Assets(25%)

Provide assurance that the organization’s policies, standards, procedures and controls ensure the confidentiality, integrity and availability of information assets.

Domain 5 - Task Statements:

5.1 Evaluate the information security and privacy policies, standards and procedures for completeness, alignment with generally accepted practices and compliance with applicable external requirements.
5.2 Evaluate the design, implementation, maintenance, monitoring and reporting of physical and environmental controls to determine whether information assets are adequately safeguarded.
5.3 Evaluate the design, implementation, maintenance, monitoring and reporting of system and logical security controls to verify the confidentiality, integrity and availability of information.
5.4 Evaluate the design, implementation and monitoring of the data classification processes and procedures for alignment with the organization’s policies, standards, procedures and applicable external requirements.
5.5 Evaluate the processes and procedures used to store, retrieve, transport and dispose of assets to determine whether information assets are adequately safeguarded.
5.6 Evaluate the information security program to determine its effectiveness and alignment with the organization’s strategies and objectives.

Domain 5 - Knowledge Statements:

5.1 Knowledge of the generally accepted practices and applicable external requirements (e.g., laws, regulations) related to the protection of information assets
5.2 Knowledge of privacy principles
5.3 Knowledge of the techniques for the design, implementation, maintenance, monitoring and reporting of security controls
5.4 Knowledge of the physical and environmental controls and supporting practices related to the protection of information assets
5.5 Knowledge of the physical access controls for the identification, authentication and restriction of users to authorized facilities and hardware
5.6 Knowledge of the logical access controls for the identification, authentication and restriction of users to authorized functions and data
5.7 Knowledge of the security controls related to hardware, system software (e.g., applications, operating systems) and database management systems.
5.8 Knowledge of the risk and controls associated with virtualization of systems
5.9 Knowledge of the risk and controls associated with the use of mobile and wireless devices, including personally owned devices (bring your own device [BYOD])
5.10 Knowledge of voice communications security (e.g., PBX, Voice-over Internet Protocol [VoIP])
5.11 Knowledge of network and Internet security devices, protocols and techniques
5.12 Knowledge of the configuration, implementation, operation and maintenance of network security controls
5.13 Knowledge of encryption-related techniques and their uses
5.14 Knowledge of public key infrastructure (PKI) components and digital signature techniques
5.15 Knowledge of the risk and controls associated with peer-to-peer computing, instant messaging, and web-based technologies (e.g., social networking, message boards, blogs, cloud computing)
5.16 Knowledge of the data classification standards related to the protection of information assets
5.17 Knowledge of the processes and procedures used to store, retrieve, transport and dispose of confidential information assets
5.18 Knowledge of the risk and controls associated with data leakage
5.19 Knowledge of the security risk and controls related to end-user computing
5.20 Knowledge of methods for implementing a security awareness program
5.21 Knowledge of information system attack methods and techniques
5.22 Knowledge of prevention and detection tools and control techniques
5.23 Knowledge of security testing techniques (e.g., penetration testing, vulnerability scanning)
5.24 Knowledge of the processes related to monitoring and responding to security incidents (e.g., escalation procedures, emergency incident response team)
5.25 Knowledge of the processes followed in forensics investigation and procedures in collection and preservation of the data and evidence (i.e., chain of custody).
5.26 Knowledge of the fraud risk factors related to the protection of information assets

YOUR BENEFITS!

Effective instruction must be highly varied and interactive to keep attention levels high, promote learning and teamwork between the students and instructor, and solidify knowledge through hands-on learning.
That's the Readynez way.

Your personal benefits

1

Your Readynez CISA Training programme will get you trained in fewer days with more training hours per day than any other provider

2

Maximum learning in a distraction free environment

3

Dedicated, onsite support at all hours

4

Advanced career opportunities with official certification

5

Improved knowledge and confidence

6

Instructors with real-world experience – you will learn about real-world problems and solutions to strengthen your understanding and skill level

7

We help you study - our focus is on real learning, not just the course or the exam, so we support you to make the most of the course and to improve your exam technique

8

Improved network of likeminded people

Get Price

Your organization's benefits

1

All-inclusive course package with no hidden costs

2

Minimum time spent out of the office

3

You'll gain a certified specialist with highly developed skills

4

We supplement the full official courseware with our expert guidance and relevant, real-world situational reviews empowering your business to get real business value from this course

Get Price

“As an approved training partner of major certification organizations, such as ICS2 and ISACA, global leaders in security programs, and vendors like Microsoft, Readynez are ideally placed to satisfy most training requirements in comfortable easily accessible facilities. And because of this relationship they have access to the very best instructors whose knowledge expertise and real world experience is second to none.”

ISACA CISA Certification

Tony Richardson

Octree

“Highly efficient way of Learning. Very skilled instructor.”

ISACA CISA Certification

Soren Andersen

Stralfors

“Thoroughly enjoyed my CISA course and felt it was very well delivered and managed, the location & accommodation were very good! I would use Readynez again for future training.”

ISACA CISA Certification

S.G.

“Knowledgeable instructor. Good enviroment + excellent materials = Recipe for success!”

ISACA CISA Certification

P.N.

“As an approved training partner of major certification organizations, such as ICS2 and ISACA, global leaders in security programs, and vendors like Microsoft, Readynez are ideally placed to satisfy most training requirements in comfortable easily accessible facilities. And because of this relationship they have access to the very best instructors whose knowledge expertise and real world experience is second to none.”

ISACA CISA Certification

Tony Richardson

Octree

ISACA

With us you’ll get the full range of accelerated ISACA certification courses, designed to provide you with the skills and knowledge you need to secure your business assets from cyber-attacks.
When you´ve achieved a globally recognised ISACA certification you can prove that you possess the experience and knowledge to meet the challenges of modern enterprise.

WHAT'S INCLUDED

Everything! In addition to your all-inclusive course package specifically designed to your
requirements, we go the extra mile to make sure you have everything you need and will
attend to every detail, so you can focus solely on your studies and certification goals.

Transportation to/from designated pick up points

Accommodation

Hands-on training with lecture/lab/review method

All course materials

Fully instructor-led program

24 hour classroom access

All meals, snacks and unlimited beverages

Certification guarantee

Transportation

We will take care of the practicalities and pick you up.

Wherever you are in the world, you can experience a distraction-free environment by staying in one of our purpose-built training centres. To make it easy for you to train with us, we offer your a transporation service. We´ll pick you up and drop you off after your course, from/to designated pick-up points - so you won´t have to think about how to reach us or get back home.

What do you get?

We´ll prepare you for the following exam:

CISA Exam

The CISA exam tests knowledge in the following CISA domains:

Domain 1 - The Process of Auditing Information Systems (21%)
Domain 2 - Governance and Management of IT (16%)
Domain 3 - Information Systems Acquisition, Development and Implementation (18%)
Domain 4 - Information Systems Operations, Maintenance and Service Management (20%)
Domain 5 - Protection of Information Assets (25%)

Readynez is an official delivery partner for ISACA exams. This means you'll study for and sit your CISA exam on site with Readynez during the accelerated course. Plus, if you don’t pass first time, you'll be covered by your Certification Guarantee.

Please note: The course price does not include external exam fees. You will book and pay for your exam directly with ISACA and take it during your course. Readynez can support you through this process.

Our course participants come from varied backgrounds and have different attributes.

To make sure you have the best possible chances of benefitting from the course, we are available for you to discuss your goals and general expectations to your learning and results.

Generally though, we do recommend that you have a minimum of five years of professional information systems auditing, control or security work experience (as described in the job content areas) is required for CISA certification. Substitutions and waivers of such experience may be obtained as follows:

A maximum of one year of information systems experience OR one year of financial or operational auditing experience can be substituted for one year of information systems auditing, control or security experience
60 to 120 completed university/college semester credit hours (the equivalent of a Bachelor degree) can be substituted for one or two years, respectively, of information systems auditing, control or security experience
Two years as a full-time university instructor in a related field (e.g., computer science, accounting, information systems auditing) can be substituted for one year of information systems auditing, control or security experience

Experience must have been gained within the 10-year period preceding the application date for certification or within five years from the date of initially passing the examination. Retaking and passing the examination will be required if the application for certification is not submitted within five years from the passing date of the examination. All experience will be verified independently with employers.

Do you have what it takes?
We´ll help you decide – Call us to discuss your technical background, experience and qualifications to determine how we can help you succeed in this Readynez course.

Just call us and speak to one of our enrolment consultants.

DATES

Here are the planned dates for your course.
Book now and get ready for your future.

ISACA CISA Certification

2. Sep – 5. Sep,
2019

4 days

Get Price

WE ALSO RECOMMEND

Security

ISACA CISM certification

The CISM certification is for the individual who manages, designs, oversees and/or assesses an enterprise's information security (IS).

View course

4 days

Project Management & Best Practice

ISACA CGEIT Certification (Certified in the Governance of Enterprise IT) 

On this Readynez course you'll learn how to ensure that your IT systems meet the business's needs - through leadership, and organizational structures and processes. Learn about the roles, responsibilities and various focus areas of IT governance.

View course

3 days

Still looking?

Find your course

Tap into our insights and make them yours - Get our newsletters.

First name

Error

Last name

Error

Work email

Error

Readynez

Since 2001, we´ve been working to accelerate digital transformation for people and businesses.
With Readynez you are empowered to achieve any vision for your talent strategy, so you can reach the next level of performance and be ready for the future.