Certified Information Systems Auditor

Certified Information Systems Auditor (CISA)

Demonstrate your expertise in IT auditing and risk management by earning the Certified Information Systems Auditor (CISA) certification.

Focus

The Certified Information Systems Auditor certification focuses on auditing and risk management in the context of technology and information systems

Exam Duration

The Certified Information Systems Auditor exam duration is 4 hours

Num of Question

The exam contains a total of 155

Exam Fee

The exam fee is $380 USD.

Exam Validity

The CCRN-Pediatric certification is valid for 3 years.

Prior Certification

• 12 months of IS auditing, control, or security experience

Exam Format

The Certified Information Systems Auditor exam is a computer-based and offered in multiple languages

Passing Conditions

To pass Certified Information Systems Auditor exam, applicants must achieve a minimum score of 700 (out of 1,000)

Who Should Take

CISA is designed for individuals who work in, or are interested in, information systems (IS) audit, control, and security. Target audiences include, but are not limited to.

• Accountant
• Auditor
• Security Professional
• Consultant
• Analyst
• Manager

Prerequisites

5 years of IS audit, control, or security experience in any one or more of the following areas: Auditing IT resources. Control, risk management, and IT governance Audit and security policies. Analyzing IT auditor reports. IS audit, control, or related work is defined in the CISA Job Practice areas. Please visit this site for detailed explanation.

Or can substitute with certifications:

• Other IS certifications
• Other professional certifications approved by (ISC)²

Certification Process

• Meet the education and work experience requirements
• Apply for and pass the exam
• Maintain your certification with continuing professional education (CPE) credits

Domains with Weights

• Domain 1: Information Systems Audit Process (15%): define the scope, audit strategy, risk assessment, and planning of an audit; identify and design testing of controls to gather audit evidence; trace audit evidence to assertion and apply audit findings to the audit report
• Domain 2: Information Systems Acquisition, Development, Implementation (12%): evaluate information systems (IS) readiness for acquisition and/or implementation, and ensure the integration of new systems into existing infrastructure or legacy systems.
• Domain 3: Information Systems Operations, Maintenance (19%): evaluate system maintenance activities, help desk support, and system changes procedures to identify opportunities for efficiency and effectiveness improvements.
• Domain 4: Information Systems Protection (16%): evaluate the implementation and effectiveness of security policies and procedures including classifications of data, roles, and access controls, authentication, and network security.
• Domain 5: Information Systems Monitoring and Service Level Management (16%): evaluate the implementation and effectiveness of monitoring and provision of IS services to ensure the successful delivery of key business capabilities and commitments to users.
• Domain 6: IS Technical Governance (22%): evaluate and improve IS IT governance through the development of strategic policies and frameworks in alignment with enterprise management and objectives.