CISA Training - Greece

Certified Information Systems Auditor Course Outline

Domain 1: Process of Information Systems Audit

Module 1: Planning

• Guidelines, Standards, and Ethics Codes of Information Systems Audit
• Assessments, Audits, and Review Types
• Planning Risk-Based Audit
• Considerations and Control Types

Module 2: Execution

• Execution Project Management Audit
• Execution of Sampling Methodology and Audit Testing
• Techniques of Audit Evidence Collection for Execution
• Analysing Audit Data
• Techniques of Communication and Reporting
• Audit Process Improvement and Quality Assurance

Domain 2: IT Management and Governance

Module 3: IT Governance

• Regulations, Laws, and Industry Standards
• IT Governance and Strategy, Organisational Structure
• Standards, Policies, Procedures and Practices of IT
• Enterprise Architecture and Considerations
• Risk Management of Enterprise
• Principles and Privacy Program
• Data Governance and Classification

Module 4: Managing Governance

• Information Technology (IT) Resource Management
• Information Technology (IT) Vendor Management
• Information Technology (IT) Performance Monitoring and Reporting
• Quality Assurance and Management of Information Technology

Domain 3: Development, Acquisition, and Implementation of IS

Module 5: IS Acquisition and Development

• Project Management and Governance
• Business Case and Feasibility Analysis
• Methodologies of System Development
• Identification and Design of Control

Module 6: IS Implementation

• System Readiness and Implementation Testing
• Release Management and Implementation Configuration
• System Migration, Data Conversion and Infrastructure Deployment
• Review of Post-Implementation

Domain 4: IS Operations and Business Resilience

Module 7: IS Operations

• Information Technology Components
• IT Asset Management
• Automation Process for Job Scheduling and Production
• System Interfaces
• End-User Computing and Shadow IT
• Capacity Management and Systems Availability
• Problem Management and Incident Management
• Change, Configuration, and Patch Management of Information Technology
• Log Management of Operations
• IT Service Level Management
• Database Management

Module 8: Business Resilience

• Business Impact Analysis
• System and Operational Resilience
• Data Backup, Storage, and Restoration
• Plan for Business Continuity
• Plans for Disaster Recovery

Domain 5: Information Assets Protection

Module 9: Security and Control of Information Asset

• Frameworks, Standards, and Guidelines
• Physical and Environmental Controls
• Finding and Access Management
• End-Point and Network Security
• Encryption and Data Loss Prevention
• Public Key Infrastructure
• Environments of Cloud and Virtualised
• Mobile, Wireless, and IoT Devices

Module 10: Event Management Security

• Programs and Security Awareness Training
• IS Attack Techniques and Methods
• Tools and Techniques of Security Testing and Monitoring
• Incident Response Management Security
• Forensics and Evidence Collection