CISA - Certified Information Systems Auditor Study Guide

Name: CISA - Certified Information Systems Auditor Study Guide | Aligned with the CISA Review Manual 2024 with over 1000 practice questions to ace the exam
Brand: Packt Publishing
Price: 29.99 EUR
Availability: OnlineOnly

Aligned with the CISA Review Manual 2024 with over 1000 practice questions to ace the exam

Hemang Doshi(Autor*in)

Packt Publishing

1. Auflage

Erschienen am 31. Oktober 2024

356 Seiten

E-Book

ePUB mit Adobe-DRM

Systemvoraussetzungen

978-1-83588-287-0 (ISBN)

29,99 €inkl. 7% MwSt.

Systemvoraussetzungen

für ePUB mit Adobe-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Cover
FM
Copyright
Foreword
Contributors
Preface
Chapter 1: Audit Planning
Making the Most Out of This Book - Your Certification and Beyond
The Contents of an Audit Charter
Key Aspects for the CISA Exam
Audit Planning
Benefits of Audit Planning
Selection Criteria for the Audit Process
Reviewing Audit Planning
Individual Audit Assignments
Audit Process
Key Aspects for the CISA Exam
Business Process Applications and Controls
E-Commerce
Electronic Data Interchange (EDI)
Point of Sale (POS)
Electronic Banking
Electronic Funds Transfer (EFT)
Image Processing
Artificial Intelligence and Expert Systems
Key Aspects from the CISA Exam Perspective
Types of Controls
Preventive Controls
Detective Controls
Corrective Controls
Deterrent Controls
The Difference Between Preventive and Deterrent Controls
Compensating Controls
Control Objectives
Control Measures
Key Aspects for the CISA Exam
Risk-Based Audit Planning
What Is Risk?
Understanding Vulnerability and Threats
Understanding Inherent Risk and Residual Risk
Advantages of Risk-Based Audit Planning
Audit Risk
Risk-Based Auditing Approach
Risk Assessments
Risk Response Methodology
Key Aspects for the CISA Exam
Types of Audits and Assessments
Internal IS Audit Function
Requirement for a Separate IS Audit Function
Governance of an IS Audit Function
Reporting Structure of an IS Audit Function
Management of IS Audit Resources
IS Audit Objective Should be Aligned with the Overall Business Objective
Key Aspects for the CISA Exam Perspective
Managing Third-Party IS Auditors and Other Experts
Regulatory and Other Requirements for Outsourcing
Due Diligence
Appointment Procedures and Best Practices
Contracts, Service-Level Agreements, and Non-Disclosure Agreements
Monitoring the Performance
Key Aspects for the CISA Exam Perspective
Code of Ethics
Summary
Exam Readiness Drill
Chapter 2: Audit Execution
Audit Project Management
Audit Objectives
Audit Phases
Key Aspects for the CISA Exam
Audit testing and Sampling methodology
Sampling Types
Sampling Risk
Other Sampling Terms
Compliance versus Substantive Testing
Key Aspects for the CISA Exam
Audit Evidence Collection Techniques
Reliability of Evidence
Evidence-Gathering Techniques
Fraud, Irregularities, and Illegal Acts
Key Aspects for the CISA Exam
Data Analytics
CAATs
Precautions While Using CAAT
Continuous Auditing and Monitoring
Key Aspects for the CISA Exam
Reporting and Communication Techniques
Exit Interview
Audit Reporting
Audit Report Objectives
Audit Report Structure
Follow-Up Activities
Key Aspects for the CISA Exam
Control Self-Assessment
Precautions While Implementing CSA
An IS Auditor's Role in CSA
Key Aspects for the CISA Exam
Agile Auditing
Dictionary Meaning of Agile
Understanding Agile Auditing
Benefits of Agile Auditing
Traditional Auditing vis-à-vis Agile Auditing
Key Aspects for the CISA Exam
Quality Assurance of Audit Processes
Oversight by Audit Committee
Continuous Education and Updating of IS Auditors
Performance Monitoring of IS Audit Functions
Continuous Improvement
Key Aspects for the CISA Exam
Use of AI in the Audit Process
How Does AI Work in Auditing?
Benefits of Using AI in Audit Processes
Risks of Using AI in Audit Processes
Use Cases of AI in the Audit Process
Best Practices for Using AI in Audit Process
Summary
Exam Readiness Drill
Chapter 3: IT Governance
EGIT
EGIT Processes
The Differences Between Governance and Management
EGIT Good Practices
Effective Information Security Governance
IS Auditor' Role in EGIT
Key Aspects for the CISA Exam
IT-Related Frameworks
IT Standards, Policies, and Procedures
Policies
Standards
Procedures
Guidelines
Information Security Policy
Top-Down and Bottom-Up Approaches to Policy Development
Key Aspects for the CISA Exam
Organizational Structure
Relationship Between the IT Strategy Committee and the IT Steering Committee
Differences Between the IT Strategy Committee and the IT Steering Committee
Key Aspects for the CISA Exam
Enterprise Architecture
Enterprise Security Architecture
Open System Architecture
Key Aspects for the CISA Exam
Enterprise Risk Management
Risk Management Process Steps
Risk Analysis Methods
Risk Treatment
Key Aspects for the CISA Exam
Maturity Model
Laws, Regulations, and Industry Standards Affecting the Organization
An IS Auditor's Role in Determining Adherence to Laws and Regulations
Key Aspects for the CISA Exam
Data Privacy Program and Principles
Privacy-Related Regulations
Privacy Principles
Important Privacy-Related Terminology
Auditing a Privacy Program
Key Aspects for the CISA Exam
Data Governance and Data Classification
Key Aspects for the CISA Exam
Summary
Exam Readiness Drill
Chapter 4: IT Management
IT Resource Management
Human Resource Management
IT Management
Financial Management
Key Aspects for the CISA Exam
IT Service Provider Acquisition and Management
Evaluation Criteria for Outsourcing
Steps for Outsourcing
Outsourcing - Risk Reduction Options
Provisions for Outsourcing Contracts
Role of IS Auditors in Monitoring Outsourced Activities
Globalization of IT Functions
Outsourcing and Third-Party Audit Reports
Monitoring and Review of Third-Party Services
Key Aspects for the CISA Exam
IT Performance Monitoring and Reporting
Development of Performance Metrics
Effectiveness of Performance Metrics
Tools and Techniques for Performance Measurement
Key Aspects for the CISA Exam
Quality Assurance and Quality Management in IT
Quality Assurance
Quality Management
Key Aspects for the CISA Exam
Summary
Exam Readiness Drill
Chapter 5: Information Systems Acquisition and Development
Project Management Structure
Project Roles and Responsibilities
Project Cost Estimation Methods
Software Size Estimation Methods
Project Evaluation Methods
Project Objectives, OBS, and WBS
Key Aspects for the CISA Exam
Business Case and Feasibility Analysis
Business Cases
Feasibility Analysis
The IS Auditor's Role in Business Case Development
System Development Methodologies
SDLC Models
SDLC Phases
Software Development Methods
Software Reengineering and Reverse Engineering
Key Aspects for the CISA Exam
Control Identification and Design
Check Digits
Parity Bits
Checksums
Forward Error Control
Data Integrity Principles
Decision Support Systems
Decision Trees
Key Aspects for the CISA Exam
Summary
Exam Readiness Drill
Chapter 6: Information Systems Implementation
Testing Methodology
Unit Testing
Integration Testing
System Testing
Final Acceptance Testing
Regression Testing
Sociability Test
Pilot Testing
Parallel Testing
White-Box Testing
Black-Box Testing
Alpha Testing
Beta Testing
Testing Approach
Testing Phases
Key Aspects for the CISA Exam
System Migration
Parallel Changeover
Phased Changeover
Abrupt Changeover
Key Aspects for the CISA Exam
Post-Implementation Review
Key Aspects for the CISA Exam
Configuration and Release Management
Release Management
Configuration Management
Key Aspects for the CISA Exam
Summary
Exam Readiness Drill
Chapter 7: Information Systems Operations
Understanding Common Technology Components
Types of Servers
Universal Serial Bus
Radio-Frequency Identification
IT Asset Management
Performance Reports
Job Scheduling
End-User Computing and Shadow IT
Key Aspects for the CISA Exam
System Performance Management
Nucleus (Kernel) Functions
Utility Programs
Parameter Setting for the Operating System
Registry
Activity Logging
Software Licensing Issues
Source Code Management
Capacity Management
Key Aspects for the CISA Exam
Problem and Incident Management
Network Management Tools
Key Aspects for the CISA Exam
Change Management, Configuration Management, and Patch Management
Change Management Process
Emergency Change Management
Backout Process
The Effectiveness of a Change Management Process
Patch Management
Configuration Management
Key Aspects for the CISA Exam
IT Service-Level Management
Database Management Process
Advantages of Database Management
Database Structures
Key Aspects for the CISA Exam
Operational Log Management
Importance of Log Management
Types of Logs
Log Management Life Cycle
Effective Data Collection
Protection of Log Data
Integration with SIEM Systems
Key Aspects for the CISA Exam
Summary
Exam Readiness Drill
Chapter 8: Business Resilience
Business Impact Analysis
Key Aspects for the CISA Exam
Data Backup and Restoration
Types of Backup Strategy
Storage Capacity for Each Backup Scheme
Key Aspects for the CISA Exam
System Resiliency
Application Resiliency - Clustering
Telecommunication Network Resiliency
Business Continuity Plan
Steps of the BCP Life Cycle
Contents of the BCP
Backup Procedure for Critical Operations
The Involvement of Process Owners in the BCP
BCP and Risk Assessments
Testing the BCP
Key Aspects for the CISA Exam
Disaster Recovery Plan
The BCP versus the DRP
The Relationship Between the DRP and the BIA
Costs Associated with Disaster Recovery
Data Backup
DRP of a Third-Party Service Provider
Resilient Information Assets
Service Delivery Objective
Key Aspects for the CISA Exam
DRP - Test Methods
Checklist Review
Structured Walk-Through
Tabletop Test
Simulation Test
Parallel Test
Full Interruption Test
Key Aspects for the CISA Exam
Recovery Time Objective (RTO) and Recovery Point Objective (RPO)
RTO
RPO
RTO and RPO for Critical Systems
RTO and RPO and Maintenance Costs
RTO, RPO, and Disaster Tolerance
Key Aspects for the CISA Exam
Alternate Recovery Sites
Mirrored Site
Hot Site
Warm Site
Cold Site
Mobile Site
Reciprocal Agreement
Summary
Exam Readiness Drill
Chapter 9: Information Asset Security and Control
Information Asset Security Frameworks
Auditing the Information Security Management Framework
Key Aspects for the CISA Exam
Physical Access and Environmental Controls
Environmental Controls
Alarm Controls
Water and Smoke Detectors
Fire Suppression Systems
Physical Access Control
Key Aspects for the CISA Exam
Industrial Control Systems
Identity and Access Management
Access Control Categories
Default Deny Policy - Allow-All Policy
Degaussing (Demagnetizing)
Naming Convention
Authentication Factors
Single Sign-On
Zero Trust
Privileged Access Management
Directory Services
Identity as a Service (IdaaS)
Digital Rights Management (DRM)
Federated Identity Management (FIM)
Key Aspects for the CISA Exam
Biometrics
Biometrics Accuracy Measure
Control over the Biometric Process
Types of Biometric Attacks
Key Aspects for the CISA Exam
Summary
Exam Readiness Drill
Chapter 10: Network Security and Control
Networking and Endpoint Devices
Open System Interconnection (OSI) Layers
Networking Devices
Network Devices and the OSI Layer
Network Physical Media
Identifying the Risks of Physical Network Media
Network Diagram
Network Protocols
Network Attached Storage (NAS)
Content Delivery Network (CDN)
Network Time Protocol (NTP)
Network Segmentation
Key Aspects for the CISA Exam
Firewall Types and Implementation
Types of Firewalls
Packet-Filtering Router
Stateful Inspection
Circuit-Level
Application-Level
Types of Firewall Implementation
The Firewall and the Corresponding OSI layer
Next-Generation Firewall (NGFW)
Unified Threat Management (UTM)
Key Aspects for the CISA Exam
VPN
VPNs - Technical Aspects
Types of VPN
VPNs - Security Risks
Key Aspects for the CISA Exam
Voice over Internet Protocol (VoIP)
SBCs
Key Aspects for the CISA Exam
Wireless Networks
Enabling MAC Filtering
Enabling Encryption
Disabling a Service Set Identifier (SSID)
Disabling DHCP
Use of Dynamic Encryption Keys
Use of a Randomly Generated Pre-Shared Key (PSK)
Common Attack Methods and Techniques for a Wireless Network
Key Aspects for the CISA Exam
Email Security
Key Aspects for the CISA Exam
Data Loss Prevention
Types of DLP
How DLP Software Operates
Benefits of DLP Software
Key Aspects for the CISA Exam
Summary
Exam Readiness Drill - Chapter Review Questions
Chapter 11: Public Key Cryptography and Other Emerging Technologies
Public Key Cryptography
Symmetric Encryption versus Asymmetric Encryption
Encryption Keys
The Hash of the Message
Combining Symmetric and Asymmetric Methods
Quantum Cryptography
Homomorphic Encryption
Domain Name System Security Extensions (DNSSEC)
Key Aspects from the CISA Exam Perspective
PKI
PKI Terminology
Processes Involved in PKI
CA versus RA
Key Aspects for the CISA Exam
Cloud Computing
Cloud Computing - Deployment Models
Types of Cloud Services
Cloud Computing - the IS Auditor's Role
Virtualization
Virtual Circuits
Virtual Local Area Network (VLAN)
Virtual Storage Area Network (VSAN)
Containerization
Mobile Computing
Internet of Things
Summary
Exam Readiness Drill
Chapter 12: Security Event Management
Security Awareness Training and Programs
Participants
Security Awareness Methods
Social Engineering Attacks
Evaluating the Effectiveness of Security Programs
Key Aspects for the CISA Exam
Information System Attack Methods and Techniques
Key Aspects for the CISA Exam
Security Testing Tools and Techniques
Network Penetration Tests
Threat Intelligence
Key Aspects for the CISA Exam
Security Monitoring Tools and Techniques
IDS
IPS
Honeypots and Honeynets
Key Aspects for the CISA Exam
Incident Response Management
Computer Security Incident Response Team
Key Aspects for the CISA Exam
Evidence Collection and Forensics
Chain of Custody
Key Elements of Computer Forensics
Summary
Exam Readiness Drill
Chapter 13: Accessing the Online Practice Resources
Index
Other Books You May Enjoy

Systemvoraussetzungen

Als PDF speichern Als Link merken