IsAuditing.com (Information Systems Audit & Security)
All about IS audit, CISA, and Information Security
There are two ways to approach preparation for a certification exam. Either you prepare it yourself by self study or you join a training. Well it is possible to go either way with CISA certification exam too. If you would like self study, then read my tips about preparing for CISA exam. And if you … Read more
When you are looking for CISA jobs, you are essentially in search of a job related to information systems auditing or information security. But mostly CISA jobs are in the field of IS auditing, though you may also try your luck with information security jobs. Best Places for Find CISA Jobs Some of the best … Read more
Anyone preparing for a certification exam is interested in knowing about the general pass percentage out of the candidates that appear in that exam. Similarly, those candidates preparing for the CISA Certification exam are interested in CISA pass rate. Difference Between CISA Passing score and CISA Pass Rate While Isaca says that the CISA passing … Read more
There are many IT certifications and it becomes a challenge to pinpoint which will be best for your career. Some of the most challenging and respectable information security certifications are offered by GIAC. However, two gold standard IT certifications that have a lot of market respect are CISA or CISSP. But it is important to … Read more
We discussed earlier why there is need for risk management in an organization. The risks identified minus the residual risks need to be controlled, minimized, mitigated or prevented. And this is where the role of internal controls comes. What are internal controls Before learning about types of internal controls, we should have a basic idea … Read more
Every business or private entity operates in a certain legal framework wherein it has to comply with certain regulations and laws. And it is the responsibility of the entity’s management o ensure compliance with all applicable laws and regulations. Because of the IS systems becoming the backbone of a lot of key business functions, it … Read more
There are many definitions of risk but the most comprehensive one that puts risk in a business context is given in the CISA Review Manual, 26th Edition and it is from International Standards Organization, as given in their Guidelines for the Management of IT Security: Risk is a potential that a given threat will exploit … Read more
We already discussed the ISACA auditing standards and if you have read the standards, you must have found that these are very brief. They are like commandments about what is expected from a CISA auditor who has to be in compliance with the ISACA auditing standards when performing an IS Audit. But these standards do … Read more
Anybody familiar with information technology knows it clearly that it changes at a very fast pace. So it is quite logical and imperative that IS auditors need to remain updated about all these continuously updating developments in technology. Otherwise, it will become very difficult to audit information systems for an IS auditor who does not … Read more
So how should the IS audit function be organized in an organization. By organization we mean what should be the scope and objectives. How it should be managed collectively and at individual audit level. Among other things related to IS audit management are audit planning, actual audit implementation, IS audit resource management, effect of prevalent … Read more