Certified Information Systems Auditor

From Wikipedia, the free encyclopedia
Jump to: navigation, search

Certified Information Systems Auditor (CISA) is a globally recognized certification in the field of audit, control and security of information systems. CISA gained worldwide acceptance having uniform certification criteria, the certification a high degree of visibility and recognition in the fields of IT security, IT audit, IT risk management and governance. Vacancies in the areas of IT security management, IT audit or IT risk management often ask for a CISA certification.[1] The certification is extremely challenging and is associated with a high failure rate[citation needed]. CISA is awarded by ISACA.[2]

Obtaining the certificate[edit]

The CISA ISACA certificate can be applied for if the following conditions are met [3] and passed the CISA exam

Membership in ISACA[edit]

The CISA certification is not tied to membership in the worldwide umbrella organization ISACA and the local (mostly national) called Chapters.

Exam[edit]

The world unified CISA exams are conducted three times a year: in June, September and December.[4] The exam is four hours in length, consists of 200 multiple choice questions and uses the format of one correct answer per question. The scoring is weighted depending on an predetermined value for each question with a passing score of 450 points and a 800 point score as the maximum. Some questions are purely for statistical purposes and do not affect the candidates score.
CISA Review Courses are organised by various educational institutions across the globe, where student go through the CISA Review manual in the 5 Domains which are ;

  1. Domain 1 — The Process of Auditing Information Systems
  2. Domain 2 — Governance and Management of IT
  3. Domain 3 — Information Systems Acquisition, Development and Implementation
  4. Domain 4 — Information Systems Operations, Maintenance and Support
  5. Domain 5 — Protection of Information Assets

Additional Requirements[edit]

As well as passing the exam, candidates must also pass the following requirements:[5]

  • The candidate must provide evidence of at least five years of professional experience. Related work experience or relevant higher education programs can provide credit against this.
  • The candidate has to comply with the auditing standards of ISACA in the exercise of audits and adhere to the ISACA Code of Professional Ethics.
  • After obtaining the CISA certification 20 hours of training must be documented per year and at least 120 in a three-year period to retain certification.

See also[edit]

References[edit]