Information Systems Auditing Principles

• Lesson Introduction
• ISACA Information Systems Auditing Standards and Guidelines
• Develop and Implement an IS Audit Strategy
• Plan an Audit
• Conduct an Audit
• The Evidence Lifecycle
• Communicate Issues, Risks, and Audit Results
• Support Risk Management and Control Practices
• Lesson Lab
• Lesson Follow Up

 IT Governance

• Lesson Introduction
• Evaluate the Effectiveness of IT Governance
• Evaluate the IT Organizational Structure
• Evaluate the IT Strategy
• Evaluate IT Policies, Standards, and Procedures for Compliance
• Ensure Organizational Compliance
• IT Resource Investment, Use, and Allocation
• Evaluate IT Contracting Strategies and Policies
• Evaluate Risk Management Practices
• Performance Monitoring and Assurance
• Lesson Lab
• Lesson Follow Up

Systems and Infrastructure Lifecycle Management

• Lesson Introduction
• Determine the Business Case for Change
• Evaluate Project Management Frameworks and Governance
• Perform Periodic Project Reviews
• Evaluate Control Mechanisms for Systems
• Evaluate Development and Testing Processes
• Evaluate Implementation Readiness
• Evaluate a System Migration
• Lesson Lab
• Lesson Follow Up

 Systems and Infrastructure Lifecycle Maintenance

• Lesson Introduction
• Perform Post-Implementation System Reviews
• Perform Periodic System Reviews
• Evaluate the Maintenance Process
• Evaluate the Disposal Process
• Lesson Lab
• Lesson Follow Up

IT Service Delivery and Support

• Lesson Introduction
• Evaluate Service Level Management Practices
• Evaluate Operations Management
• Evaluate Data Administration Practices
• Evaluate Capacity and Performance Monitoring
• Evaluate Change, Configuration, and Release Management
• Evaluate Problem and Incident Management
• Evaluate IT Infrastructure Functionality
• Lesson Lab
• Lesson Follow Up

Protection of Information Assets

• Lesson Introduction
• Information Security Design
• Encryption Basics
• Evaluate Logical Access Controls
• Evaluate Physical Access Controls
• Evaluate Environmental Controls
• Evaluate Network Infrastructure Security
• Evaluate Confidential Information Handling
• Lesson Lab
• Lesson Follow Up

 Business Continuity and Disaster Recovery

• Lesson Introduction
• Evaluate Backup and Restore Adequacy
• Evaluate BCP and DRP (Business Continuity & Disaster Recovery Plans)
• Lesson Lab
• Lesson Follow Up