|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/introduction-for-certified-in-information-system-auditcisa/
课程评论：没有评论
课程名称：CISA认证信息系统审计师入门 课程概述：CISA认证信息系统审计师课程提供了治理和控制企业IT及进行有效安全审计所需的技能。该课程与最新版本的CISA考试（2019年）对齐，使您能够保护信息系统。课程涵盖CISA的五个领域，每个部分与CISA职位实践直接对应。您可以按照推荐的结构或目标职位实践领域，自主按自己的节奏学习。课程允许您根据自己的学习计划随时开始和停止，下次回来时从上次停下的地方接着学习。 课程内容： - 第1领域：信息系统审计过程 - 第2领域：IT治理与管理 - 第3领域：信息系统的获取、开发与实施 - 第4领域：信息系统的运营与业务韧性 - 第5领域：信息资产的保护 主要内容： - 第1领域：审计信息系统的过程：制定并实施符合IT审计标准的基于风险的IT审计策略，确保关键领域得到涵盖；计划具体的审计，以确定信息系统是否受到保护、受控且对组织提供价值；按照IT审计标准进行审计以实现预定的审计目标；报告审计发现并向关键利益相关者提出建议，以传达结果并引导变革；进行跟进或就风险管理与控制实践提供建议。 此课程旨在为希望提升IT审计能力的学习者提供专业培训，帮助他们在信息系统审计领域取得成功。
The Certified Information Systems Auditor or CISA certification course provides you the skills required to govern and control enterprise IT and perform an effective security audit. Aligned with the latest edition of the CISA exam (2019) it upskills you to protect information systems.The course covers all five of the CISA domains, and each section corresponds directly to the CISA job practice.You will be able to navigate the course at your own pace following a recommended structure or target preferred job practice areas.You may also start and stop the course based on your preferred study schedule, picking up exactly where you left off the next time you return.Domain 1 - Information System Auditing Process Domain 2 - Governance and Management of IT Domain 3 - IS Acquisition, Development and implementationDomain 4 - Information Systems Operation and Business Resilience Domain 5 - Protection of Information AssetsDomain 1. The Process of Auditing Information Systems:Develop and implement a risk-based IT audit strategy in compliance with IT audit standards to ensure that key areas are included.Plan specific audits to determine whether information systems are protected, controlled and provide value to the organization.Conduct audits in accordance with IT audit standards to achieve planned audit objectives.Report audit findings and make recommendations to key stakeholders to communicate results and effect change.Conduct follow ups or advise on risk management & control practice
