O'Reilly logo

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

CISA (Certified Information Systems Auditor)

Video Description

Overview
The CISA (Certified Information Systems Auditor) Complete Video Course is an engaging self-paced video training solution that provides learners with 16 hours of personal, visual instruction from an expert trainer who has more than two decades of practical auditing and assurance experience. Through the use of topic-focused instructional videos, you will gain an in-depth understanding of each objective in the CISA exam as well as a deeper understanding of auditing and security.

Description
CISA (Certified Information Systems Auditor) Complete Video Course contains 16 hours of training with content divided into 6 modules with 22 full lessons. In addition to the live trainer discussions, demos, and screencasts, you will find live assessment walk-throughs at the end of each lesson so you can see how to approach and answer questions throughout the course. Sari Greene, best-selling author of the CISSP Complete Video Course and the CISSP Exam Prep Course, has also included 16 real-world auditing videos where she supplies practical tips and information that will help you pass the CISA exam and, just as importantly, better understand the concepts of Information Systems Auditing.

The video lessons in this course review each exam objective, so you can use it as a complete study tool for taking the CISA exam.

Major sections are as follows:

Module 1: The Process of Auditing Information Systems
Lesson 1: Audit Fundamentals
Lesson 2: Auditing

Module 2: Governance and Management of IT
Lesson 3: Governance Structure, Processes, and Models
Lesson 4: Risk Management
Lesson 5: Third-Party Relationships
Lesson 6: Business Continuity

Module 3: Information Systems Acquisition, Development, and Implementation
Lesson 7: Project Management
Lesson 8: Application Development
Lesson 9: System Acquisition and Implementation

Module 4: Information Systems Operations, Maintenance, and Service Management
Lesson 10: IS Operational Management
Lesson 11: Data Management
Lesson 12: Network Architecture
Lesson 13: Disaster Response and Recovery

Module 5: Protection of Information Assets
Lesson 14: Information Security Program Management
Lesson 15: Authentication and Authorization
Lesson 16: Infrastructure Security
Lesson 17: Cryptography
Lesson 18: Physical and Environmental Security

Module 6: Acing Your Exam
Lesson 19: Understanding the Exam Structure
Lesson 20: Test Taking Strategies
Lesson 21: What to Expect at the Testing Center
Lesson 22: Attaining and Maintaining Your CISA Certification

About the Instructor

Sari Greeneis an information security practitioner, author, educator, and entrepreneur. In 2003, Sari founded one of the first dedicated cybersecurity consultancies. She is a recognized leader in the field of cybersecurity and has amassed thousands of hours in the field working with a spectrum of technical, operational, compliance, and management personnel as well as boards of directors, regulators, service providers, and law enforcement agencies.

Sari’s first text wasTools and Techniques for Securing Microsoft Networks, commissioned by Microsoft to train its partner channel, followed soon after by the first edition ofSecurity Policies and Procedures: Principles and Practices. The second edition,Security Program and Policies: Principles and Practices, is currently being used in undergraduate and graduate programs nationwide. She is also the author and presenter of the best-selling Pearson CISSP Complete Video Course and the CISSP Exam Prep course. Sari has published a number of articles related to cybersecurity; has been quoted in theNew York Times,Wall Street Journal, on CNN, and on CNBC; speaks regularly at cybersecurity, legal, financial, and healthcare conferences and workshops around the country; and is a frequent guest lecturer.

Sari serves on the Bangor Savings Bank board of directors and is chair of the risk management committee. She provided expert witness testimony in the groundbreaking PATCO v. Ocean National Bank case, represents industry on the Massachusetts Bankers Association Cybersecurity Task Force, and is a member of the American Bankers Association cybersecurity faculty.

Sari earned her MBA from the University of New Hampshire system. She holds multiple industry accreditations, including CISA, CISSP-ISSMP, CRISC, CISM, MCSE, and NSA/IAM. She is also certified in offshore emergency medicine.

You can contact Sari at sari@sarigreene.com, follow her on Twitter at @sari_greene, or visit her website http://www.sarigreene.com.

Skill Level
Intermediate to advanced

What You Will Learn

  • Every objective on the CISA: Certified Information Systems Auditor exam
  • Tips to prepare for and pass the exam
  • Real-world information systems auditing skills
Who Should Take This Course
Primary audience: Anyone preparing for the ISACA CISA certification examination.
Secondary audience: Anyone interested in learning information systems auditing skills; those interested in learning about security auditing.

Course Requirements
Familiarity with basic auditing and information systems concepts.

About LiveLessons Video Training
Pearson’s LiveLessons video training series publishes the industry’s leading video tutorials for IT pros, developers, sys admins, devops, network engineers, and certification candidates. LiveLessons feature the highest-quality professional skills training led by recognized author instructors published by Addison-Wesley, Cisco Press, Pearson IT Certification, Prentice Hall, Sams, and Que. Topics include IT certification, programming, development, networking, software skills for the home, office, and business, and more. Your purchase provides you with lifetime online access to the content.
http://www.pearsonitcertification.com/livelessons

Table of Contents

  1. Introduction
    1. CISA (Certified Information Systems Auditor): Introduction 00:04:06
  2. Module 1: The Process of Auditing Information Systems
    1. Module Intro 00:01:14
  3. Lesson 1: Audit Fundamentals
    1. Learning objectives 00:01:04
    2. 1.1 Understanding the Audit Function 00:08:20
    3. 1.2 Adhering to ISACA IS Audit and Assurance Standards and Guidelines 00:06:12
    4. 1.3 Identifying the Risk / Audit Relationship 00:07:14
    5. 1.4 Surveying IS Controls 00:08:07
    6. Lesson 1 Review 00:07:06
  4. Lesson 2: Auditing
    1. Learning objectives 00:00:57
    2. 2.1 Performing an IS Audit 00:06:19
    3. 2.2 Gathering Audit Evidence 00:08:40
    4. 2.3 Understanding Sampling Techniques 00:08:45
    5. 2.4 Reporting and Communicating Audit Results 00:10:44
    6. 2.5 Audit Evolutions 00:07:09
    7. Lesson 2 Review 00:06:49
  5. Module 2: Governance and Management of IT
    1. Module Intro 00:01:30
  6. Lesson 3: Governance Structure, Processes, and Models
    1. Learning objectives 00:01:11
    2. 3.1 Understanding Corporate and Information Security Governance (Defining Governance) 00:07:22
    3. 3.2 Designing Strategic Plans, Policies, and Procedures 00:09:53
    4. 3.3 Surveying IT Organizational Structures and SOD 00:07:40
    5. 3.4 Surveying Maturity and Process Implementation Models 00:07:31
    6. 3.5 Understanding Performance Optimization 00:07:41
    7. 3.6 Real-world Auditing IT Governance 00:03:11
    8. Lesson 3 Review 00:07:18
  7. Lesson 4: Risk Management
    1. Learning objectives 00:00:58
    2. 4.1 Evaluating a Risk Management Program 00:07:59
    3. 4.2 Conducting a Risk Assessment 00:09:42
    4. 4.3 Real-world Auditing Risk Management 00:02:56
    5. Lesson 4 Review 00:05:39
  8. Lesson 5: Third-Party Relationships
    1. Learning objectives 00:01:08
    2. 5.1 Examining Outsourcing and Third-Party Management 00:10:55
    3. 5.2 Deconstructing Cloud Computing 00:09:30
    4. 5.3 Real-world Auditing Third-Party Relationships 00:03:24
    5. Lesson 5 Review 00:06:18
  9. Lesson 6: Business Continuity
    1. Learning objectives 00:01:02
    2. 6.1 Defining Business Continuity Planning 00:08:12
    3. 6.2 Examining a Business Impact Analysis (BIA) 00:08:48
    4. 6.3 Designing Business Continuity Plans 00:07:49
    5. 6.4 Evaluating Business Continuity Testing and Readiness 00:09:07
    6. 6.5 Real-world Auditing Business Continuity 00:03:19
    7. Lesson 6 Review 00:06:56
  10. Module 3: Information Systems Acquisition, Development, and Implementation
    1. Module Intro 00:01:30
  11. Lesson 7: Project Management
    1. Learning objectives 00:01:04
    2. 7.1 Developing a Business Case 00:06:11
    3. 7.2 Understanding Portfolio Management 00:05:31
    4. 7.3 Defining Project Management 00:11:55
    5. 7.4 Real-world Auditing Portfolio and Project Management 00:03:37
    6. Lesson 7 Review 00:06:31
  12. Lesson 8: Application Development
    1. Learning objectives 00:01:09
    2. 8.1 Exploring Business Application Development 00:07:28
    3. 8.2 Identifying Software Development Testing Techniques 00:09:46
    4. 8.3 Recognizing Source Code Vulnerabilities 00:06:29
    5. 8.4 Real-world Auditing the Development Process 00:03:30
    6. Lesson 8 Review 00:05:48
  13. Lesson 9: System Acquisition and Implementation
    1. Learning objectives 00:01:14
    2. 9.1 Exploring Acquisition Processes 00:06:31
    3. 9.2 Deconstructing System Implementation 00:08:31
    4. 9.3 Recognizing Application Controls 00:08:03
    5. 9.4 Understanding Configuration and Change Management 00:07:58
    6. 9.5 Real-world Auditing Acquisition and Implementation 00:04:08
    7. Lesson 9 Review 00:06:11
  14. Module 4: Information Systems Operations, Maintenance, and Service Management
    1. Module Intro 00:01:38
  15. Lesson 10: IS Operational Management
    1. Learning objectives 00:01:11
    2. 10.1 Surveying Information Systems Management and Frameworks 00:07:24
    3. 10.2 Managing Operational Processes 00:08:05
    4. 10.3 Understanding Asset Management 00:03:46
    5. 10.4 Real-world Auditing IS Operational Management 00:03:26
    6. Lesson 10 Review 00:04:12
  16. Lesson 11: Data Management
    1. Learning objectives 00:01:01
    2. 11.1 Defining Data Management 00:07:27
    3. 11.2 Exploring Database Management Systems (DBMS) 00:09:28
    4. 11.3 Real-world Auditing Data Management 00:03:44
    5. Lesson 11 Review 00:05:30
  17. Lesson 12: Network Architecture
    1. Learning objectives 00:01:22
    2. 12.1 Examining OSI and TCP/IP Models 00:06:13
    3. 12.2 Exploring Transmission Media and Telecommunications 00:09:01
    4. 12.3 Understanding Wireless Networks 00:10:32
    5. 12.4 Exploring VoIP 00:06:50
    6. 12.5 Real-world Auditing Network Architecture 00:03:45
    7. Lesson 12 Review 00:05:36
  18. Lesson 13: Disaster Response and Recovery
    1. Learning objectives 00:01:39
    2. 13.1 Understanding Disaster Reponse and Recovery Objectives 00:05:44
    3. 13.2 Identifying Recovery Strategies 00:07:25
    4. 13.3 Assessing Backup and Replication Strategies 00:10:23
    5. 13.4 Evaluating Disaster Recovery Plan Maintenance 00:07:35
    6. 13.5 Real-world Auditing Disaster Response and Recovery 00:04:14
    7. Lesson 13 Review 00:06:18
  19. Module 5: Protection of Information Assets
    1. Module Intro 00:01:57
  20. Lesson 14: Information Security Program Management
    1. Learning objectives 00:01:13
    2. 14.1 Surveying Information Security Management Systems (ISMS) 00:07:18
    3. 14.2 Identifying Information Security Classifications and Controls 00:04:54
    4. 14.3 Exploring Cyberthreats and Adversaries 00:09:58
    5. 14.4 Understanding Incident Management 00:06:37
    6. 14.5 Evaluating Investigative and Evidence Handling Capabilities 00:09:51
    7. 14.6 Real-world Auditing Information Security Program Management 00:03:13
    8. Lesson 14 Review 00:05:50
  21. Lesson 15: Authentication and Authorization
    1. Learning objectives 00:01:01
    2. 15.1 Examining Identification and Authentication 00:07:47
    3. 15.2 Exploring Access Control 00:11:31
    4. 15.3 Monitoring Access 00:08:25
    5. 15.4 Real-world Auditing User Access Controls 00:03:41
    6. Lesson 15 Review 00:06:10
  22. Lesson 16: Infrastructure Security
    1. Learning objectives 00:01:15
    2. 16.1 Surveying Perimeter Security 00:13:04
    3. 16.2 Managing Malware 00:08:25
    4. 16.3 Security Endpoint 00:07:23
    5. 16.4 Mobile Device Challenges 00:06:07
    6. 16.5 Testing Network Infrastructure Security 00:10:16
    7. 16.6 Real-world Auditing Infrastructure Security Controls 00:03:47
    8. Lesson 16 Review 00:06:39
  23. Lesson 17: Cryptography
    1. Learning objectives 00:01:14
    2. 17.1 Demystifying Encryption 00:09:01
    3. 17.2 Applying Asymmetric Encryption 00:06:50
    4. 17.3 Examining Hashing and Digital Signatures 00:07:52
    5. 17.4 Understanding Digital Certificates 00:07:57
    6. 17.5 Identifying Cryptographic Protocols and Attacks 00:06:48
    7. 17.6 Real-world Auditing Cryptographic Protocols 00:03:48
    8. Lesson 17 Review 00:07:21
  24. Lesson 18: Physical and Environmental Security
    1. Learning objectives 00:01:10
    2. 18.1 Examining Environmental Threats 00:06:26
    3. 18.2 Securing People and Places 00:06:18
    4. 18.3 Real-world Auditing Environmental and Physical Access 00:03:58
    5. Lesson 18 Review 00:04:33
  25. Module 6: Acing Your Exam
    1. Module Intro 00:00:23
    2. Lesson 19: Understanding the Exam Structure 00:03:01
    3. Lesson 20: Test Taking Strategies 00:03:49
    4. Lesson 21: What to Expect at the Testing Center 00:03:06
    5. Lesson 22: Attaining and Maintaining Your CISA Certification 00:01:33
  26. Summary
    1. CISA (Certified Information Systems Auditor): Summary 00:00:49