PART 2 – CISA Domain 3 – Information Systems Acquisition, development and implementation What is Project Management structure? What are the project organizational forms? What is Project communication and culture? What are the project objectives? What is OBS and WBS? 4. Projec...

PART 1 – CISA Domain 3 – Information Systems Acquisition, development and implementation Overall understanding of Domain 3 What is benefits realization? What is portfolio management? What is Business case development and approval? What are the business realization techniques? Overall...

PART 5 – CISA Domain 2 – Governance and Management of IT What is the classification of systems and their criticality analysis? What are the components of Business Continuity Planning (BCP)? What is Plan testing? 13. Classification of systems and criticality analysis: C...

PART 4 – CISA Domain 2 – Governance and Management of IT What are the various Information Security roles and their Responsibilities? What is Business Continuity Planning (BCP)? What is Business Impact Analysis (BIA)? 10.Information Security – Roles and Responsibilities: ...

PART 3 – CISA Domain 2 – Governance and Management of IT What is Risk Management? What are the steps involved in Risk Management process? What is Human Resource Management? What are the Sourcing Practices? 7.Risk Management: The process of identifying vulnerabilitie...

PART 2 – CISA Domain 2 – Governance and Management of IT What is IT Balanced Score Card (BSC)? What are the roles and responsibilities of IT Governing Committee (IT Strategy and Steering committee)? What are the Maturity and process improvement models? 4.IT Balanced Score Card (B...

This article covers – Overall understanding of the domain Important concepts to focus on from exam point of view   The article is split into 5 parts as below: Part 1 – Corporate Governance, Governance of Enterprise IT (GEIT), Auditor’s role in GEIT Part 2 – IT Balanced Score ...

PART 3 8.Compliance testing Vs. substantive testing Compliance testing - determines whether controls are in compliance with management policies and procedures Examples: User access rights Program change control procedures Review of logs Software license audit Su...

  PART 2 4. Internal Controls: Internal controls are normally composed of policies, procedures, practices and organizational structures which are implemented to reduce risks to the organizations The board of directors are responsible for establishing the effective internal...

This article covers – Overall understanding of the domain Important concepts to focus on from exam point of view The article is split into 3 parts as below: Part 1 – Overall understanding of Domain 1, Important concepts from exam point of view – Audit charter, Audit planning, Risk analys...