Trisha Shetty (Editor)

Certified Information Systems Auditor

Updated on
Edit
Like
Comment
Share on FacebookTweet on TwitterShare on LinkedInShare on Reddit

Certified Information Systems Auditor (CISA) is a globally recognized certification in the field of audit, control and security of information systems. CISA gained worldwide acceptance having uniform certification criteria, the certification has a high degree of visibility and recognition in the fields of IT security, IT audit, IT risk management and governance. Vacancies in the areas of IT security management, IT audit or IT risk management often ask for a CISA certification. The exam tends to be associated with a high failure rate. CISA is awarded by ISACA.

Contents

Obtaining the certificate

The CISA ISACA certificate can be applied for if the candidate has passed the CISA exam and the following conditions are met:

  • Experience as an auditor of information systems
  • Compliance with Code of Ethics
  • Continuous training
  • Compliance with the standards for audits of information systems

    • Membership in ISACA

    The CISA certification is not tied to membership in the worldwide umbrella organization ISACA and the local (mostly national) called Chapters.

    Exam

    The world unified CISA exams are conducted three times a year: in June, September and December. The exam is four hours long, consists of 150 multiple choice questions and uses the format of one correct answer per question. The scoring is weighted depending on a predetermined value for each question with a passing score of 450 points and an 800-point score as the maximum. Some questions are purely for statistical purposes and do not affect the candidate's score.

    CISA Review Courses are organized by various educational institutions across the globe, where students go through the CISA Review manual in the five domains which are:

    1. Domain 1 — The Process of Auditing Information Systems (Contains 21% of the Total Marks or 31 Questions)
    2. Domain 2 — Governance and Management of IT (Contains 16% of the Total Marks or 24 Questions)
    3. Domain 3 — Information Systems Acquisition, Development and Implementation (Contains 18% of the Total Marks or 27 Questions)
    4. Domain 4 — Information Systems Operations, Maintenance and Service Management (Contains 20 % of the Total Marks or 30 Questions)
    5. Domain 5 — Protection of Information Assets (Contains 25 % of the Total Marks or 38 Questions)

    Additional requirements

    As well as passing the exam, candidates must also pass the following requirements:

  • The candidate must provide evidence of at least five years of professional experience. Related work experience or relevant higher education programs can provide credit against this.
  • The candidate has to comply with the auditing standards of ISACA in the exercise of audits and adhere to the ISACA Code of Professional Ethics.
  • After obtaining the CISA certification 20 hours of training must be documented per year and at least 120 in a three-year period to retain certification.

    • References

    Certified Information Systems Auditor Wikipedia
    (Text) CC BY-SA


    Similar Topics