CISA - Certified Information Systems Auditor Study Guide

Aligned with the CISA Review Manual 2019 to help you audit, monitor, and assess information systems

Hemang Doshi 지음

Packt(GCO Science) 2020년 08월 21일 출간

작품소개

책소개

This CISA study guide is for those interested in achieving CISA certification and provides complete coverage of ISACA's latest CISA Review Manual (2019) with practical examples and over 850 exam-oriented practice questions

▶Book Description
Are you looking to prepare for the CISA exam and understand the roles and responsibilities of an information systems (IS) auditor?

The CISA - Certified Information Systems Auditor Study Guide is here to help you get started with CISA exam prep.

This book covers all the five CISA domains in detail to help you pass the exam. You'll start by getting up and running with the practical aspects of an information systems audit. The book then shows you how to govern and manage IT, before getting you up to speed with acquiring information systems. As you progress, you'll gain knowledge of information systems operations and understand how to maintain business resilience, which will help you tackle various real-world business problems. Finally, you'll be able to assist your organization in effectively protecting and controlling information systems with IT audit standards.

By the end of this CISA book, you'll not only have covered the essential concepts and techniques you need to know to pass the CISA certification exam but also have the ability to apply them in the real world.

▶What You Will Learn
？Understand the information systems auditing process
？Get to grips with IT governance and management
？Gain knowledge of information systems acquisition
？Assist your organization in protecting and controlling information systems with IT audit standards
？Understand information systems operations and how to ensure business resilience
？Evaluate your organization's security policies, standards, and procedures to meet its objectives

▶Key Features
？Gain tactical skills in auditing, control, and security to pass the CISA examination
？Get up to speed with auditing business IT systems
？Increase your value to organizations and be at the forefront of an evolving business landscape by achieving CISA certification

▶Who This Book Is For
This CISA exam study guide is designed for those with a non-technical background who are interested in achieving CISA certification and are currently employed or looking to gain employment in IT audit and security management positions.

목차

▶TABLE of CONTENTS
▷ Section 1: Information System Auditing Process
？Chapter 1: Audit Planning
？Chapter 2: Audit Execution

▷ Section 2: Governance and Management of IT
？Chapter 3: IT Governance
？Chapter 4: IT Management

▷ Section 3: Information Systems Acquisition, Development, and Implementation
？Chapter 5: Information Systems Acquisition and Development
？Chapter 6: Information Systems Implementation

▷ Section 4: Information System Operations and Business Resilience
？Chapter 7: Information System Operations
？Chapter 8: Business Resilience

▷ Section 5: Protection of Information Assets
？Chapter 9: Information Asset Security and Control
？Chapter 10: Network Security and Control
？Chapter 11: Public Key Cryptography and Other Emerging Technologies
？Chapter 12: Security Event Management

책 속으로

▶What this book covers
？ Chapter 1, Audit Planning, deals with the audit processes, standards, guidelines, practices, and techniques that an IS auditor is expected to use during audit assignments. An IS auditor must have a detailed knowledge of IS processes, business processes, and risk management processes in order to protect an organization's assets.

？ Chapter 2, Audit Execution, covers project management techniques, sampling methodology, and audit evidence collection techniques. It provides details regarding data analysis techniques, reporting and communication techniques, and quality assurance processes.

？ Chapter 3, IT Governance, provides an introduction to IT governance and aspects related to IT enterprise governance. Enterprise governance includes the active involvement of management in IT management. Effective IT governance and management involves an organization's structure as well as IT standards, policies, and procedures.

？ Chapter 4, IT Management, walks you through various aspects of designing and approving IT management policy and effective information security governance. It will also teach you to audit and evaluate IT resource management, along with services provided by third-party service providers, while also covering IT performance monitoring and reporting.

？ Chapter 5, Information Systems Acquisition and Development, provides information about project governance and management techniques. This chapter discusses how an organization evaluates, develops, implements, maintains, and disposes of its information systems and related components.

？ Chapter 6, Information Systems Implementation, covers various aspects of information systems implementation. The implementation process comprises a variety of stages, including system migration, infrastructure deployment, data conversion or migration, user training, post-implementation review, and user acceptance testing.

？ Chapter 7, Information Systems Operations, explains how to identify risk related to technology components and how to audit and evaluate IT service management practices, systems performance management, problem and incident management policies and practices, change, configuration, release and patch management processes, and database management processes.

？ Chapter 8, Business Resilience, covers all aspects of the business impact analysis, system resiliency, data backup, storage and restoration, the business continuity plan, and disaster recovery plans.

？ Chapter 9, Information Asset Security and Control, provides information about the information security management framework, privacy principles, physical access and environmental controls, and identity and access management.

？ Chapter 10, Network Security and Control, provides an introduction to various components of networks, network-related risks and controls, types of firewalls, and wireless security.

？ Chapter 11, Public Key Cryptography and Other Emerging Technologies, details various aspects of public key cryptography, cloud computing, virtualization, mobile computing, and the Internet of Things.

？ Chapter 12, Security Event Management, looks in depth at how to evaluate an organization's information security and privacy policies and practices. It also discusses various types of information system attack methods and techniques, and covers different security monitoring tools and techniques as well as evidence collection and forensics methodology.

출판사 서평

▶ Preface
Certified Information System Auditor (CISA) is one of the most sought-after courses in field of auditing, control, and information security. CISA is a globally recognized certification that validates your expertise and gives you the leverage you need in order to advance in your career. CISA certification is key to a successful career in IT.

CISA certification can showcase your expertise and assert your ability to apply a risk-based approach to planning, executing, and reporting on projects and engagements. It helps to gain instant credibility as regards your interactions with internal stakeholders, regulators, external auditors, and customers.

작가정보

저자(글) Hemang Doshi

Hemang Doshi is a chartered accountant and a Certified Information System Auditor with more than 15 years' experience in the field of IS auditing/risk-based auditing/compliance auditing/vendor risk management/due diligence/system risk and control. He is the founder of dedicated platforms for CISA (cisaexamstudy) and CRISC (criscexamstudy) study. He has also authored other books on auditing.