Book Image

CISA – Certified Information Systems Auditor Study Guide

By : Hemang Doshi
Book Image

CISA – Certified Information Systems Auditor Study Guide

By: Hemang Doshi

Overview of this book

Are you looking to prepare for the CISA exam and understand the roles and responsibilities of an information systems (IS) auditor? The CISA - Certified Information Systems Auditor Study Guide is here to help you get started with CISA exam prep. This book covers all the five CISA domains in detail to help you pass the exam. You’ll start by getting up and running with the practical aspects of an information systems audit. The book then shows you how to govern and manage IT, before getting you up to speed with acquiring information systems. As you progress, you’ll gain knowledge of information systems operations and understand how to maintain business resilience, which will help you tackle various real-world business problems. Finally, you’ll be able to assist your organization in effectively protecting and controlling information systems with IT audit standards. By the end of this CISA book, you'll not only have covered the essential concepts and techniques you need to know to pass the CISA certification exam but also have the ability to apply them in the real world.
Table of Contents (19 chapters)
1
Section 1: Information System Auditing Process
4
Section 2: Governance and Management of IT
7
Section 3: Information Systems Acquisition, Development, and Implementation
10
Section 4: Information System Operations and Business Resilience
13
Section 5: Protection of Information Assets

Audit project management

Audit includes various activities, such as audit planning, resource allocation, determining audit scope and audit criteria, reviewing and evaluating audit evidence, forming audit conclusions, and reporting to management. All these activities are integral parts of audit, and project management techniques are equally applicable for audit projects.

The following are the basic steps for managing and monitoring audit projects:

The activities mentioned in the preceding figure are performed to achieve some specific audit objectives. This is also discussed in the next topic.

Audit objectives

Audit objectives are the expected outcome of the audit activities. They refer to the intended goals that must be accomplished by the audit. Determining the audit objective is a very important step in planning the audit activity. Generally, audits are conducted to achieve the objectives mentioned here:

  • To confirm that internal control exists
  • To evaluate the effectiveness of internal...