Discover the keys to conducting a successful audit - the nature of a business, its driving processes, and its underlying IT solutions. Examine controls and audit reporting in preparation for the CISA exam.
Learning Objectives
Certified Information Systems Auditor (CISA) 2019: Information System Auditing
- recall how IS auditing shows whether IT solutions meet business objectives efficiently and effectively
- recognize expectations of conduct for CISA certified individuals
- recall how auditing standards provide guidance for conducting efficient audits
- interpret various types of documentation when preparing an IS audit
- identify client needs that map to business objectives
- recognize the importance of network documentation
- list different categories of security controls including internal business process controls, IT controls, and sampling types
- identify control objectives required to secure organizational assets along with the controls themselves
- plan for audit funding, personnel, and related items
- schedule audit phases
- report serious discoveries including fraud or serious IT vulnerabilities
- generate audit reports including which existing controls have passed or failed
- communicate with stakeholders after audit recommendations are reported
- identify how IS auditing identifies weak security controls