The Complete Guide for CISA Examination Preparation: Security, Audit and Leadership Series
Autor Richard E. Cascarinoen Limba Engleză Hardback – 6 oct 2020
Richard E. Cascarino, MBA, CIA, CISM, CFE, CRMA, is well known in international auditing. Richard is a principal of Richard Cascarino & Associates. He has over 31 years’ experience in audit training and consulting. He is a regular speaker at national and international conferences and has presented courses throughout Africa, Europe, the Middle East and the USA. Richard is a Past President of the Institute of Internal Auditors in South Africa, was the founding Regional Director of the Southern African Region of the IIA-Inc. and is a member of ISACA, and the Association of Certified Fraud Examiners, where he is a member of the Board of Regents for Higher Education. Richard was Chairman of the Audit Committee of Gauteng cluster 2 (Premier's office, Shared Services and Health) in Johannesburg and is currently the Chairman of the Audit and Risk Committee of the Department of Public Enterprises in South Africa.
Richard is also a visiting Lecturer at the University of the Witwatersrand, author of the book Internal Auditing: An Integrated Approach, now in its third edition. This book is extensively used as a university textbook worldwide. In addition, he is the author of the Auditor's Guide to IT Auditing, Second Edition and the book Corporate Fraud and Internal Control: A Framework for Prevention. He is also a contributor to all four editions of QFINANCE, the Ultimate Resource.
Toate formatele și edițiile | Preț | Express |
---|---|---|
Paperback (1) | 202.94 lei 6-8 săpt. | +60.41 lei 10-14 zile |
CRC Press – 6 oct 2020 | 202.94 lei 6-8 săpt. | +60.41 lei 10-14 zile |
Hardback (1) | 532.91 lei 6-8 săpt. | |
CRC Press – 6 oct 2020 | 532.91 lei 6-8 săpt. |
Din seria Security, Audit and Leadership Series
- 14% Preț: 299.73 lei
- 20% Preț: 262.00 lei
- 20% Preț: 260.76 lei
- 33% Preț: 139.30 lei
- 20% Preț: 257.69 lei
- 31% Preț: 257.63 lei
- 13% Preț: 302.31 lei
- 20% Preț: 257.04 lei
- 31% Preț: 255.34 lei
- 31% Preț: 314.91 lei
- 31% Preț: 338.58 lei
- 30% Preț: 671.63 lei
- 31% Preț: 343.65 lei
- 34% Preț: 204.18 lei
- 34% Preț: 215.87 lei
- 31% Preț: 296.59 lei
- 20% Preț: 262.67 lei
- 23% Preț: 398.61 lei
- 34% Preț: 202.94 lei
- 31% Preț: 467.34 lei
- 31% Preț: 259.85 lei
- 32% Preț: 641.92 lei
- 31% Preț: 373.88 lei
- 31% Preț: 372.09 lei
- 31% Preț: 373.76 lei
- 31% Preț: 372.02 lei
- 29% Preț: 191.94 lei
- 32% Preț: 946.41 lei
- 31% Preț: 341.89 lei
- 31% Preț: 359.04 lei
- 33% Preț: 219.37 lei
- 31% Preț: 357.61 lei
- 33% Preț: 196.06 lei
- 25% Preț: 657.14 lei
- 34% Preț: 214.77 lei
- 31% Preț: 329.06 lei
- 34% Preț: 215.94 lei
Preț: 532.91 lei
Preț vechi: 778.01 lei
-32% Nou
Puncte Express: 799
Preț estimativ în valută:
101.97€ • 107.69$ • 84.86£
101.97€ • 107.69$ • 84.86£
Carte tipărită la comandă
Livrare economică 11-25 ianuarie 25
Preluare comenzi: 021 569.72.76
Specificații
ISBN-13: 9781138308763
ISBN-10: 1138308765
Pagini: 272
Ilustrații: 1 Tables, black and white
Dimensiuni: 156 x 234 x 16 mm
Greutate: 0.51 kg
Ediția:1
Editura: CRC Press
Colecția Auerbach Publications
Seria Security, Audit and Leadership Series
ISBN-10: 1138308765
Pagini: 272
Ilustrații: 1 Tables, black and white
Dimensiuni: 156 x 234 x 16 mm
Greutate: 0.51 kg
Ediția:1
Editura: CRC Press
Colecția Auerbach Publications
Seria Security, Audit and Leadership Series
Public țintă
Professional Practice & DevelopmentCuprins
Contents
· Introduction
Chapter 1 Introduction to the CISA examination
· The structure of the CISA exam
· Becoming Certified
· Experience requirements
· Passing the Exam
· CISA Job Practice Domains and task and knowledge statements
· ISACA’s Code of Professional Ethics
· The ISACA Standards
· Continuous Professional Education
Chapter 2: Domain 1—The Process of Auditing Information Systems
· Knowledge Statements
· Understanding the Fundamental Business Processes
· Control principles related to controls in information systems
· Risk-based audit planning and audit project management techniques
· Quality of the internal control framework
· Auditor understanding of the applicable laws
· Evidence collection techniques
· Domain One – exam tips
· Domain One - Practice questions
· Domain One – Review Questions and Hands on Exercise
· Domain One - Answers to practice questions
· Exercise 1 sample answer
Chapter 3: Domain 2—Governance and Management of IT
· Governance in General
· Resource Management
· Project Management Tools
· Auditor’s Role in the Project Management Process
· Audit Risk Assessment
· Audit Planning
· Domain Two - practice questions
Domain Two – Review Questions and Hands on Exercise
· Exercise 2 sample answer
· Domain 2 Answers to practice questions
Chapter 4: Domain 3— Information Systems Acquisition, Development and Implementation
· Systems Acquisition
· Systems Development
· Systems Implementation
· Systems Maintenance Review
· Domain Three - practice questions
Domain Three – Review Questions and Hands on Exercise
· Exercise 3 sample answer
· Domain 3 Answers to practice questions
Chapter 5: Domain 4— Information Systems Operations, Maintenance and Service Management
· Hardware
· Auditing Operating Systems
· People
· System interfaces
· Change Management
· Auditing Change Control
· Disaster Recovery Planning
· Auditing Service Delivery
· Domain Four - practice questions
· Domain Four – Review Questions and Hands on Exercise
· Exercise 4 sample answer
· Domain 4 Answers to practice questions
Chapter 6: Domain 5— Protection of Information Assets
· Protection of information assets
· Privacy principles
· Design, implementation, maintenance, monitoring and reporting of security controls
· Physical access controls for the identification, authentication and restriction of users
· Logical access controls for the identification, authentication and restriction of users
· Risk and controls associated with virtualization of systems
· Risks and controls associated with the use of mobile and wireless devices
· Encryption-related techniques and their uses
· Public key infrastructure (PKI) components and digital signature techniques
· Peer-to-peer computing, instant messaging, and web-based technologies
· Data classification standards related to the protection of information assets
· Risks in end-user computing
· Implementing a security awareness program
· Information system attack methods and techniques
· Prevention and detection tools and control techniques
· Security testing techniques
· Penetration testing and Vulnerability scanning
· Forensic investigation and procedures in collection and preservation of the data and evidence
· Domain Five - practice questions
· Domain Five – Review Questions and Hands on Exercise
· Exercise 5 sample answer
· Domain 5 Answers to practice questions
Chapter 7— Preparing for the Exam
Appendices
Appendix A: Glossary of Terms
Appendix B: CISA Sample Exam – Choose any 150 questions
Appendix C: Sample Exam Answers
· Introduction
Chapter 1 Introduction to the CISA examination
· The structure of the CISA exam
· Becoming Certified
· Experience requirements
· Passing the Exam
· CISA Job Practice Domains and task and knowledge statements
· ISACA’s Code of Professional Ethics
· The ISACA Standards
· Continuous Professional Education
Chapter 2: Domain 1—The Process of Auditing Information Systems
· Knowledge Statements
· Understanding the Fundamental Business Processes
· Control principles related to controls in information systems
· Risk-based audit planning and audit project management techniques
· Quality of the internal control framework
· Auditor understanding of the applicable laws
· Evidence collection techniques
· Domain One – exam tips
· Domain One - Practice questions
· Domain One – Review Questions and Hands on Exercise
· Domain One - Answers to practice questions
· Exercise 1 sample answer
Chapter 3: Domain 2—Governance and Management of IT
· Governance in General
· Resource Management
· Project Management Tools
· Auditor’s Role in the Project Management Process
· Audit Risk Assessment
· Audit Planning
· Domain Two - practice questions
Domain Two – Review Questions and Hands on Exercise
· Exercise 2 sample answer
· Domain 2 Answers to practice questions
Chapter 4: Domain 3— Information Systems Acquisition, Development and Implementation
· Systems Acquisition
· Systems Development
· Systems Implementation
· Systems Maintenance Review
· Domain Three - practice questions
Domain Three – Review Questions and Hands on Exercise
· Exercise 3 sample answer
· Domain 3 Answers to practice questions
Chapter 5: Domain 4— Information Systems Operations, Maintenance and Service Management
· Hardware
· Auditing Operating Systems
· People
· System interfaces
· Change Management
· Auditing Change Control
· Disaster Recovery Planning
· Auditing Service Delivery
· Domain Four - practice questions
· Domain Four – Review Questions and Hands on Exercise
· Exercise 4 sample answer
· Domain 4 Answers to practice questions
Chapter 6: Domain 5— Protection of Information Assets
· Protection of information assets
· Privacy principles
· Design, implementation, maintenance, monitoring and reporting of security controls
· Physical access controls for the identification, authentication and restriction of users
· Logical access controls for the identification, authentication and restriction of users
· Risk and controls associated with virtualization of systems
· Risks and controls associated with the use of mobile and wireless devices
· Encryption-related techniques and their uses
· Public key infrastructure (PKI) components and digital signature techniques
· Peer-to-peer computing, instant messaging, and web-based technologies
· Data classification standards related to the protection of information assets
· Risks in end-user computing
· Implementing a security awareness program
· Information system attack methods and techniques
· Prevention and detection tools and control techniques
· Security testing techniques
· Penetration testing and Vulnerability scanning
· Forensic investigation and procedures in collection and preservation of the data and evidence
· Domain Five - practice questions
· Domain Five – Review Questions and Hands on Exercise
· Exercise 5 sample answer
· Domain 5 Answers to practice questions
Chapter 7— Preparing for the Exam
Appendices
Appendix A: Glossary of Terms
Appendix B: CISA Sample Exam – Choose any 150 questions
Appendix C: Sample Exam Answers
Notă biografică
Richard E. Cascarino, MBA, CIA, CISM, CFE, CRMA, is well-known in international auditing. Richard is a principal of Richard Cascarino & Associates. He has more than 31 years’ experience in audit training and consulting. He is a regular speaker to National and International conferences and has presented courses throughout Africa, Europe, the Middle East and the USA. Richard is a Past President of the Institute of Internal Auditors in South Africa, was the founding Regional Director of the Southern African Region of the IIA-Inc. and is a member of ISACA, and the Association of Certified Fraud Examiners, where he is a member of the Board of Regents for Higher Education. Richard was Chairman of the Audit Committee of Gauteng cluster 2 (Premier's office, Shared Services and Health) in Johannesburg and is currently the Chairman of the Audit and Risk Committee of the Department of Public Enterprises in South Africa. He is also a visiting Lecturer at the University of the Witwatersrand, author of the book Internal Auditing: An Integrated Approach, now in its third edition. This book is extensively used as a university textbook worldwide. In addition, he is the author of the Auditor's Guide to IT Auditing, Second Edition and the book Corporate Fraud and Internal Control: A Framework for Prevention. He is also a contributor to all four editions of QFINANCE, the Ultimate Resource.
Descriere
The Complete Guide for CISA Examination Preparation delivers complete coverage of every topic on the latest release of the Certified Information Systems Auditor (CISA) exam. Designed to help candidates pass the CISA exam easily, it also serves as an ideal on-the-job reference.