CISA Certified Information Systems Auditor - Puerto Rico

Certified Information Systems Auditor Course Outline

Module 1: Information Systems Auditing Process

• Planning
  • IS Audit Standards, Guidelines, and Codes of Ethics
  • Types of Audits, Assessments, and Reviews
  • Risk-Based Audit Planning
  • Types of Controls and Considerations
• Execution
  • Audit Project Management
  • Audit Testing and Sampling Methodology
  • Audit Evidence Collection Techniques
  • Audit Data Analytics
  • Reporting and Communication Techniques
  • Quality Assurance and Improvement of Audit Process

Module 2: Governance and Management of IT

• IT Governance
• Laws, Regulations, and Industry Standards
  • Organisational Structure, IT Governance, and IT Strategy
  • IT Policies, Standards, Procedures and Practices
  • Enterprise Architecture and Considerations
  • Enterprise Risk Management
  • Privacy Program and Principles
  • Data Governance and Classification
• IT Management
  • IT Resource Management
  • IT Vendor Management
  • IT Performance Monitoring and Reporting
  • Quality Assurance and Quality Management of IT

Module 3: Information Systems Acquisition, Development and Implementation

• Information Systems Acquisition and Development
  • Project Governance and Management
  • Business Case and Feasibility Analysis
  • System Development Methodologies
  • Control Identification and Design
• Information Systems Implementation
  • System Readiness and Implementation Testing
  • Implementation Configuration and Release Management
  • System Migration, Infrastructure Deployment, and Data Conversion
  • Post-implementation Review

Module 4: Information Systems Operations and Business Resilience

• Information Systems Operations
  • IT Components
  • IT Asset Management
  • Job Scheduling and Production Process Automation
  • System Interfaces
  • Shadow IT and End-User Computing
  • Systems Availability and Capacity Management
  • Problem and Incident Management
  • IT Change, Configuration, and Patch Management
  • Operational Log Management
  • IT Service Level Management
  • Database Management
• Business Resilience
  • Business Impact Analysis
  • System and Operational Resilience
  • Data Backup, Storage, and Restoration
  • Business Continuity Plan
  • Disaster Recovery Plans

Module 5: Protection of Information Assets

• Information Asset Security and Control
  • Information Asset Security Frameworks, Standards, and Guidelines
  • Physical and Environmental Controls
  • Identity and Access Management
  • Network and End-Point Security
  • Data Loss Prevention
  • Data Encryption
  • Public Key Infrastructure
  • Cloud and Virtualised Environments
  • Mobile, Wireless, and Internet-of-Things Devices
• Security Event Management
  • Security Awareness Training and Programs
  • Information System Attack Methods and Techniques
  • Security Testing Tools and Techniques
  • Security Monitoring Tools and Techniques
  • Security Incident Response Management
  • Evidence Collection and Forensics

Who Should Attend this CISA Certified Information Systems Auditor Course?

CISA Training focuses on developing practical knowledge in auditing, controlling, and assuring information systems. It supports professionals across multiple roles by strengthening their ability to manage IT risk, evaluate controls, and support governance objectives, including:

• Information Systems Auditors
• Internal Auditors
• Risk Management Specialists
• Compliance Officers
• Security Analysts
• IT Consultants
• Data Protection Officers

Prerequisites of the CISA Certified Information Systems Auditor Course

There are no formal prerequisites for this CISA Training. However, delegates must possess five years of professional information systems auditing, control, or security work experience.

Certified Information Systems Auditor Course Overview

The Certified Information Systems Auditor (CISA) Training develops knowledge of information systems auditing, control, and security. It focuses on evaluating governance structures, managing IT risk, and ensuring effective control and assurance of information systems.

This training supports professional upskilling by strengthening audit readiness and control assessment skills. Delegates gain the capability to identify vulnerabilities, assess risks, and support organisational resilience and compliance objectives.

This 4-Day course offered by The Knowledge Academy helps delegates apply information systems audit and control principles confidently in real-world environments. Delegates build competence in managing assurance activities and support informed decision-making.

Certified Information Systems Auditor Course Objectives

• To understand the process of auditing information systems and manage audit risks
• To gain knowledge of information systems control design and implementation
• To learn the management and governance practices of IT systems
• To develop skills in information systems acquisition, development, and implementation
• To strengthen the ability to assess IT operations, service delivery, and continuity controls
• To enhance practical capability in identifying control gaps and supporting assurance outcomes

After completing this CISA Training, delegates will gain strong practical knowledge in information systems audit and control. This learning supports professional capability, strengthens audit effectiveness, and enhances alignment with recognised industry practices.

What’s Included in this CISA Certified Information Systems Auditor Course?

• World-Class Training Sessions from Experienced Instructors
• Interactive Learning with 24*7 Support
• Digital Delegate Pack