IsAuditing.com (Information Systems Audit & Security)
All about IS audit, CISA, and Information Security
CISA Exam is one of the most challenging exams because it tests the candidate’s concepts. Therefore, you need to be well prepared to pass CISA exam in first attempt. We have written a detailed post about how to pass CISA exam in first attempt. In this article, we are going to get information about how … Read more
When you are looking to certify your skills as an information systems auditor with a CISA certification, you must be clear about CISA certification requirements because apart from knowing everything about the CISA exam itself, there are other requirements too which you need to meet before being granted the CISA Certification. In fact there are … Read more
There are two ways to approach preparation for a certification exam. Either you prepare it yourself by self study or you join a training. Well it is possible to go either way with CISA certification exam too. If you would like self study, then read my tips about preparing for CISA exam. And if you … Read more
When you are looking for CISA jobs, you are essentially in search of a job related to information systems auditing or information security. But mostly CISA jobs are in the field of IS auditing, though you may also try your luck with information security jobs. Best Places for Find CISA Jobs Some of the best … Read more
Anyone preparing for a certification exam is interested in knowing about the general pass percentage out of the candidates that appear in that exam. Similarly, those candidates preparing for the CISA Certification exam are interested in CISA pass rate. Difference Between CISA Passing score and CISA Pass Rate While Isaca says that the CISA passing … Read more
There are many IT certifications and it becomes a challenge to pinpoint which will be best for your career. Some of the most challenging and respectable information security certifications are offered by GIAC. However, two gold standard IT certifications that have a lot of market respect are CISA or CISSP. But it is important to … Read more
We discussed earlier why there is need for risk management in an organization. The risks identified minus the residual risks need to be controlled, minimized, mitigated or prevented. And this is where the role of internal controls comes. What are internal controls Before learning about types of internal controls, we should have a basic idea … Read more
Every business or private entity operates in a certain legal framework wherein it has to comply with certain regulations and laws. And it is the responsibility of the entity’s management o ensure compliance with all applicable laws and regulations. Because of the IS systems becoming the backbone of a lot of key business functions, it … Read more
There are many definitions of risk but the most comprehensive one that puts risk in a business context is given in the CISA Review Manual, 26th Edition and it is from International Standards Organization, as given in their Guidelines for the Management of IT Security: Risk is a potential that a given threat will exploit … Read more
We already discussed the ISACA auditing standards and if you have read the standards, you must have found that these are very brief. They are like commandments about what is expected from a CISA auditor who has to be in compliance with the ISACA auditing standards when performing an IS Audit. But these standards do … Read more