Coverage of the CISA Review Manual 2007
Chapter 1: The IS Audit Process
-Introduction
-ISACA IS Auditing Standards and Guidelines
-Risk Analysis
-Internal Controls
-Performing an IS Audit
-Control Self-assessment
-Emerging Changes in the IS Audit Process
-Chapter 1 Case Study
-Practice Questions
-Answers to Practice Questions
-Suggested Resources for Reference
Chapter 2: IT Governance
-Corporate Governance
-Monitoring and Assurance Practices for Board and Executive Management
-Information Systems Strategy
-Policies and Procedures
-Risk Management
-IS Management Practices
-IS Organizational Structure and Responsibilities
-Auditing IT Governance Structure and Implementation
-Chapter 2 Case Study
-Practice Questions
-Answers to Practice Questions
-Suggested Resources for Reference
Chapter 3: Systems and Infrastructure Life Cycle Management
-Business Realization
-Project Management Structure
-Project Management Practices
-Business Application Development
-Alternative Application Development Approaches
-Alternative Forms of Software Project Organization
-Alternative Development Methods
-Infrastructure Development/Acquisition Practices
-Information Systems Maintenance Practices
-System Development Tools and Productivity Aids
-Process Improvement Practices
-Application Controls
-Auditing Application Controls
-Auditing Systems Development, Acquisition and Maintenance
-Business Application Systems
-Chapter 3 Case Study
-Practice Questions
-Answers to Practice Questions
-Suggested Resources for Reference
Chapter 4: IT Service Delivery and Support
-Information Systems Operations
-Information Systems Hardware
-Information Systems Architecture and Software
-IS Network Infrastructure
-Auditing Infrastructure and Operations
-Chapter 4 Case Study
-Practice Questions
-Answers to Practice Questions
-Suggested Resources for Reference
Chapter 5: Protection of Information Assets
-Importance of Information Security Management
-Logical Access Exposures and Controls
-Network Infrastructure Security
-Auditing Information Security Framework
-Auditing Network Infrastructure Security
-Environmental Exposures and Controls
-Physical Access Exposures and Controls
-Mobile Computing
-Chapter 5 Case Study
-Practice Questions
-Answers to Practice Questions
-Suggested Resources for Reference
Chapter 6: Business Continuity and Disaster Recovery
-Business Continuity/Disaster Recovery Planning
-Auditing Disaster Recovery and Business Continuity
-Chapter 6 Case Study
-Practice Questions
-Answers to Practice Questions
-Suggested Resources for Reference
Appendix A: The CISA Examination and COBIT
-COBIT 3rd Edition
-COBIT 4.0
Appendix B: IS Auditing Standards, Guidelines and Procedures
-Relationship of Standards to Guidelines and Procedures
Appendix C: 2007 CISA Examination General Information
-Requirements for Certification
-Successful Completion of the CISA Examination
-Experience in Is Auditing, Control and Security
-Description of the Examination
-Registration for the CISA Examination
-CISA Program Accredited under ISO/IEC 17024:2003
-Preparing for the CISA Examination
-Types of Exam Questions
-Administration of the Examination
-Sitting for the Examination
-Budgeting Your Time
-Rules and Procedures
-Grading the Examination
Complete List of 2007 CISA Study Materials