|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/new-2024-cisa-27th-edition-isaca-750-test-questions/
课程评论：没有评论
课程名称：CISA考试750道测试题 概述：该课程不需要官方ISACA账户，旨在帮助考生准备CISA考试。课程内容涵盖五个主要领域，具体包括： 1. **信息系统审计过程（21%）**：本领域强调提供行业标准的审计服务，协助组织保护和控制其信息系统。涵盖审计标准、业务流程、风险导向审计规划、审计项目管理、数据分析及质量保证等方面的内容。 2. **IT治理与管理（17%）**：确认考生识别关键问题的能力，并为利益相关者推荐企业特定的治理实践。内容包括IT治理、战略、相关框架及法律法规对组织的影响等。 3. **信息系统的获取、开发与实施（12%）**：证明考生在IT控制方面的能力及其与业务的关系。内容聚焦于项目治理、可行性分析、系统开发方法论及测试方法等。 4. **信息系统运营与业务韧性（23%）**：强调考生在信息系统操作及业务连续性方面的知识。涵盖技术组件、IT资产管理、变更管理及业务连续性计划等内容。 5. **信息资产保护（27%）**：着重于网络安全在几乎所有信息系统角色中的重要性。内容涉及信息资产安全框架、身份管理、数据加密及安全事件管理等。 课程未提供详细大纲，主要通过750道测试题帮助学员掌握各领域的知识与应用，提升CISA考试的通过率。
No official ISACA account.21% DOMAIN 1 - INFORMATION SYSTEMS AUDITING PROCESSProviding industry-standard audit services to assist organizations in protecting and controlling information systems, Domain-1 affirms your credibility to offer conclusions on the state of an organization's IS/IT security, risk and control solutions.A-PLANNINGIS Audit Standards, Guidelines, and Codes of EthicsBusiness ProcessesTypes of ControlsRisk-Based Audit PlanningTypes of Audits and AssessmentsB-EXECUTIONAudit Project ManagementSampling MethodologyAudit Evidence Collection TechniquesData AnalyticsReporting and Communication TechniquesQuality Assurance and Improvement of the Audit Process17% DOMAIN 2 - GOVERNANCE & MANAGEMENT OF ITThis domain confirms to stakeholders your abilities to identify critical issues and recommend enterprise-specific practices to support and safeguard the governance of information and related technologies.A-IT GOVERNANCEIT Governance and IT StrategyIT-Related FrameworksIT Standards, Policies, and ProceduresOrganizational StructureEnterprise ArchitectureEnterprise Risk ManagementMaturity ModelsLaws, Regulations, and Industry Standards affecting the OrganizationB-IT MANAGEMENTIT Resource ManagementIT Service Provider Acquisition and ManagementIT Performance Monitoring and ReportingQuality Assurance and Quality Management of IT12% DOMAIN 3 - INFORMATION SYSTEMS ACQUISITION, DEVELOPMENT & IMPLEMENTATIONDomains 3 and 4 offer proof not only of your competency in IT controls, but also your understanding of how IT relates to business.A-INFORMATION SYSTEMS ACQUISITION AND DEVELOPMENTProject Governance and ManagementBusiness Case and Feasibility AnalysisSystem Development MethodologiesControl Identification and DesignB-INFORMATION SYSTEMS IMPLEMENTATIONTesting MethodologiesConfiguration and Release ManagementSystem Migration, Infrastructure Deployment and Data ConversionPost-implementation Review23% DOMAIN 4 - INFORMATION SYSTEMS OPERATIONS & BUSINESS RESILIENCEDomains 3 and 4 offer proof not only of your competency in IT controls, but also your understanding of how IT relates to business.A-INFORMATION SYSTEMS OPERATIONSCommon Technology ComponentsIT Asset ManagementJob Scheduling and Production Process AutomationSystem InterfacesEnd-User ComputingData GovernanceSystems Performance ManagementProblem and Incident ManagementChange, Configuration, Release, and Patch ManagementIT Service Level ManagementDatabase ManagementB-BUSINESS RESILIENCEBusiness Impact Analysis (BIA)System ResiliencyData Backup, Storage, and RestorationBusiness Continuity Plan (BCP)Disaster Recovery Plans (DRP)27% DOMAIN 5 - PROTECTION OF INFORMATION ASSETSCybersecurity now touches virtually every information systems role, and understanding its principles, best practices and pitfalls is a major focus within Domain 5.A-INFORMATION ASSET SECURITY AND CONTROLInformation Asset Security Frameworks, Standards, and GuidelinesPrivacy PrinciplesPhysical Access and Environmental ControlsIdentity and Access ManagementNetwork and End-Point SecurityData ClassificationData Encryption and Encryption-Related TechniquesPublic Key Infrastructure (PKI)Web-Based Communication TechniquesVirtualized EnvironmentsMobile, Wireless, and Internet-of-Things (IoT) DevicesB-SECURITY EVENT MANAGEMENTSecurity Awareness Training and ProgramsInformation System Attack Methods and TechniquesSecurity Testing Tools and TechniquesSecurity Monitoring Tools and TechniquesIncident Response ManagementEvidence Collection and Forensics
