Roles and responsibilities of information security auditor

Most people break out into cold sweats at the thought of conducting an audit, and for good reason. Auditing the information systems of an organization requir

CISA Domain 5 - Protection of Information Assets

The focus of Domain 5 is the evaluation of controls for protecting information assets. The syllabus covers: Logical security controls Physical and en

CISA domain 4: Information systems operations, maintenance and service management

This domain aims to ensure the candidate has a sound understanding of the processes for information systems operations, service management, and disaster reco

CISA domain 3: Information systems acquisition, development and implementation

The purpose of this element of CISA is to make sure candidates can assure the effective operation of the processes used for IS acquisition, development, and

CISA domain 1: The process of auditing information systems

The Certified Information Systems Auditor (CISA) certification exam focuses on five job practice areas, or domains. You can review them all here. In this art

IT Auditor interview questions

IT auditors are responsible for performing independent verifications of an organization’s security posture. These positions can have many name variations on

IT auditing and controls - Database technology and controls

PORTIONS OF THIS ARTICLE INCLUDING MANY OF THE DEFINITIONS AND TERMINOLOGY HAVE BEEN SOURCED AND SUMMARIZED FROM ISACA.ORG and COURSE MANUALS PUBLISHED BY IS

IT auditing and controls - Infrastructure general controls

PORTIONS OF THIS ARTICLE INCLUDING MANY OF THE DEFINITIONS AND TERMINOLOGY HAVE BEEN SOURCED AND SUMMARIZED FROM ISACA.ORG and COURSE MANUALS PUBLISHED BY IS

IT auditing and controls – Auditing organizations, frameworks and standards

What is a standard?  Who defines standards?  Where do we as IT auditors come into contact with standards?  Which framework should we use to do an IT audit an

CISA Domain 5 – Protection of Information Assets

Domain 5, Protection of Information Assets is the last domain in the CISA certification area and the most important. ISACA has stated that this domain repres