CISA (Certified Information Systems Auditor) Review Class Starts on 11/01/2016

[mzee wa ndonga]

The job practice domains and task and knowledge statements are as follows:
Domain 1-The Process of Auditing Information Systems (21%)
Domain 2-Governance and Management of IT (16%)
Domain 3-Information Systems Acquisition, Development and Implementation (18%)
Domain 4-Information Systems Operations, Maintenance and Service Management (20%)
Domain 5-Protection of Information Assets (25%)
[h=2]Domain 1-The Process of Auditing Information Systems[/h]Provide audit services in accordance with IS audit standards to assist the organization in protecting and controlling information systems. (21%)
[h=3]Task Statements:[/h]

1.1	Execute a risk-based IS audit strategy in compliance with IS audit standards to ensure that key risk areas are audited.
1.2	Plan specific audits to determine whether information systems are protected, controlled and provide value to the organization.
1.3	Conduct audits in accordance with IS audit standards to achieve planned audit objectives.
1.4	Communicate audit results and make recommendations to key stakeholders through meetings and audit reports to promote change when necessary.
1.5	Conduct audit follow-ups to determine whether appropriate actions have been taken by management in a timely manner.

[h=3]Knowledge Statements:[/h]

1.1	Knowledge of ISACA IT Audit and Assurance Standards, Guidelines and Tools and Techniques, Code of Professional Ethics and other applicable standards
1.2	Knowledge of the risk assessment concepts and tools and techniques used in planning, examination, reporting and follow-up
1.3	Knowledge of fundamental business processes (e.g., purchasing, payroll, accounts payable, accounts receivable) and the role of IS in these processes
1.4	Knowledge of the control principles related to controls in information systems
1.5	Knowledge of risk-based audit planning and audit project management techniques, including follow-up
1.6	Knowledge of the applicable laws and regulations that affect the scope, evidence collection and preservation, and frequency of audits
1.7	Knowledge of the evidence collection techniques (e.g., observation, inquiry, inspection, interview, data analysis, forensic investigation techniques, computer-assisted audit techniques [CAATs]) used to gather, protect and preserve audit evidence
1.8	Knowledge of different sampling methodologies and other substantive/data analytical procedures
1.9	Knowledge of reporting and communication techniques (e.g., facilitation, negotiation, conflict resolution, audit report structure, issue writing, management summary, result verification)
1.10	Knowledge of audit quality assurance (QA) systems and frameworks
1.11	Knowledge of various types of audits (e.g., internal, external, financial) and methods for assessing and placing reliance on the work of other auditors or control entities

Tunandelea kupokea wanafunzi, nafasi ni chache na darasa halizidi wanafunzi 15 kwa ajili ya ku manage uelewa wa wanafunzi

karibuni sana..

 

[mzee wa ndonga]

tushapokea wanafunzi 11 wanaohitaji kuanza darasa la cisa, zimebaki nafasi 6 ili kukamilisha idadi ya wanafunzi 17 wanaotosha kuingia kwenye darasa..tunazidi kuwakaribisha wale wote wenye intrest ya kusoma na kufaulu cisa

karibuni sana

 

[mzee wa ndonga]

Domain 1—The Process of Auditing Information Systems

Provide audit services in accordance with IS audit standards to assist the organization in protecting and controlling information systems. (21%)

Task Statements:

1.1

Execute a risk-based IS audit strategy in compliance with IS audit standards to ensure that key risk areas are audited.

1.2

Plan specific audits to determine whether information systems are protected, controlled and provide value to the organization.

1.3

Conduct audits in accordance with IS audit standards to achieve planned audit objectives.

1.4

Communicate audit results and make recommendations to key stakeholders through meetings and audit reports to promote change when necessary.

1.5

Conduct audit follow-ups to determine whether appropriate actions have been taken by management in a timely manner.

Knowledge Statements:

1.1

Knowledge of ISACA IT Audit and Assurance Standards, Guidelines and Tools and Techniques, Code of Professional Ethics and other applicable standards

1.2

Knowledge of the risk assessment concepts and tools and techniques used in planning, examination, reporting and follow-up

1.3

Knowledge of fundamental business processes (e.g., purchasing, payroll, accounts payable, accounts receivable) and the role of IS in these processes

1.4

Knowledge of the control principles related to controls in information systems

1.5

Knowledge of risk-based audit planning and audit project management techniques, including follow-up

1.6

Knowledge of the applicable laws and regulations that affect the scope, evidence collection and preservation, and frequency of audits

1.7

Knowledge of the evidence collection techniques (e.g., observation, inquiry, inspection, interview, data analysis, forensic investigation techniques, computer-assisted audit techniques [CAATs]) used to gather, protect and preserve audit evidence

1.8

Knowledge of different sampling methodologies and other substantive/data analytical procedures

1.9

Knowledge of reporting and communication techniques (e.g., facilitation, negotiation, conflict resolution, audit report structure, issue writing, management summary, result verification)

1.10

Knowledge of audit quality assurance (QA) systems and frameworks

1.11

Knowledge of various types of audits (e.g., internal, external, financial) and methods for assessing and placing reliance on the work of other auditors or control entities​

 

[mzee wa ndonga]

Below is what is supposed to be covered in CISA Module one

Domain 1—The Process of Auditing Information Systems

Provide audit services in accordance with IS audit standards to assist the organization in protecting and controlling information systems. (21%)


Task Statements:

1.1 Execute a risk-based IS audit strategy in compliance with IS audit standards to ensure that key risk areas are audited.

1.2 Plan specific audits to determine whether information systems are protected, controlled and provide value to the organization.

1.3 Conduct audits in accordance with IS audit standards to achieve planned audit objectives.

1.4 Communicate audit results and make recommendations to key stakeholders through meetings and audit reports to promote change when necessary.

1.5 Conduct audit follow-ups to determine whether appropriate actions have been taken by management in a timely manner.

Knowledge Statements:

1.1 Knowledge of ISACA IT Audit and Assurance Standards, Guidelines and Tools and Techniques, Code of Professional Ethics and other applicable standards

1.2 Knowledge of the risk assessment concepts and tools and techniques used in planning, examination, reporting and follow-up

1.3 Knowledge of fundamental business processes (e.g., purchasing, payroll, accounts payable, accounts receivable) and the role of IS in these processes

1.4 Knowledge of the control principles related to controls in information systems

1.5 Knowledge of risk-based audit planning and audit project management techniques, including follow-up

1.6 Knowledge of the applicable laws and regulations that affect the scope, evidence collection and preservation, and frequency of audits

1.7 Knowledge of the evidence collection techniques (e.g., observation, inquiry, inspection, interview, data analysis, forensic investigation techniques, computer-assisted audit techniques [CAATs]) used to gather, protect and preserve audit evidence

1.8 Knowledge of different sampling methodologies and other substantive/data analytical procedures

1.9 Knowledge of reporting and communication techniques (e.g., facilitation, negotiation, conflict resolution, audit report structure, issue writing, management summary, result verification)

1.10 Knowledge of audit quality assurance (QA) systems and frameworks

1.11 Knowledge of various types of audits (e.g., internal, external, financial) and methods for assessing and placing reliance on the work of other auditors

 

[mzee wa ndonga]

The Certified Information Systems Auditor (CISA) Training aims to make working professionals adept at evaluating, securing and controlling complex business and IT systems in an enterprise. This course will also highlight government regulations and helps devise policies with stronger internal control measures and disclosures.

CISA Certification acts as a career differentiator for security professionals or IT managers who wish to enhance their marketability and credibility. This is an ideal path for those looking at a long term career in Information Systems Auditing. This course is highly recommended for IS/IT auditors, IT managers, Audit Managers, Security Managers, System Analysts, Consultants, and even CIOs and CTOs.

Course Objectives
Participants enrolled for this course will learn the following set of skills:

• Entire Process of Auditing Information Systems
• Management and Governance of IT
• Acquisition, Implementation and Development of Business Information Systems
• Managing Operations, Support and Maintenance of IS
• Securing Information Assets

These core skills provide extensive understanding of managerial and technological factors that must be coordinated effectively in order to protect business information and systems.

Contact us for more information.

 

[mzee wa ndonga]

Zimebaki nafasi 4 za kujiunga na review class ya January
Please reserve your chance

regards

sam

 

[mzee wa ndonga]

To be or Not to be Certified

With obvious arguments for embracing certifications, it is surprising that some organizations still do not actively support the certification of their staff. Perhaps it is because a large number of variables make it difficult to conclusively measure and attribute the impact of certified professionals to business outcomes.21 Another reason is that IT has very few regulations that mandate certification. With the increased complexity of modern information systems and high-impact decision making based on risk assessment rather than a best-practice- prescribed approach, it is obvious that professional certification plays a critical role in skillfully managing organizational risk with benefits that are bound to surpass the relatively modest investment in certifications. Without regulations, audit functions should perhaps pay more attention to whether organizations are embracing professional certifications of staff and contractors and within vendors as a risk management tool. Rather than waiting on a regulation, embracing professional certifications is a simple solution in the hands of organizations that will also pay back through an improved bottom line.
We will help you to achieve what you want in terms of certification.

 

[mzee wa ndonga]

Wakati tunajiandaa kuhudhuria darasa la CISA..niwatakie watu wote heri na baraka ya mwaka mpya. na Bwana awatangulie katika kila mlifanyalo.
amen..

 

[mzee wa ndonga]

Available Study Materials From ISACA:
Passing an ISACA exam can be achieved through an organized plan of study.
To assist individuals with the development of a successful study plan, ISACA
offers, for purchase, study aids to exam candidates. visit isaca
bookstore for more complete details including detailed descriptions of the
products, costs, and languages available. Order early as delivery time can be
one to two weeks, depending on geographic location and customs clearance
practices.
CISA:
CISA Review Manual 26th Edition.
CISA Review Questions, Answers & Explanations Manual 11th Edition
CISA Review Questions, Answers & Explanation Database—
12 month subscription

For more information please contact us..

 

[mzee wa ndonga]

Bado week moja review class ya CISA ianze..zimebaki nafasi mbili, kwa wale ambao bado ama wanahitaji mawasiliano wawasiliane na mimi haraka iwezekanavyo.
Nawatakia heri ya mwaka mpya mwema.

 

[mzee wa ndonga]

imebaki week moja exactly review class ya CISA ianze...karibuni sana...

 

[mzee wa ndonga]

One of the part we are covering includes Value For money Audit, it covers the following

• Learn the significance of value for money (VFM) and performance in information system auditing.
• Maximize audit benefit and understand its applicability to the organization.
• Make use of best practice developed in the organization to drive real benefit.
• Know how to plan, deliver and report on VFM/performance information systems audits.
• Apply VFM auditing techniques to assess “economy, efficiency and effectiveness” in business.
• Produce reports that maximize impact, drive improvement and add business value.

Karibuni sana...

 

[mzee wa ndonga]

Among of the topics covered in CISA is Business Continuity and disaster recovery plan.
Read the article below.


The disruptions of the organisation critical operations can happen at any time either naturally (fire, flood, hurricane, tornado, earthquake, and volcanoes) or by man-made (Plane crashes, Theft/Crime, vandalism, terrorism, riots, sabotage, loss of key personnel, electrical outage etc). Disasters can strike at any time and can mean life or death for organisation. Researches shows that, all companies that close due to disasters (i.e. cyber crime, pandemics, hurricanes, power failures, acts of terror, fire, flood and others) never reopen. The effective implementation and operation of BCM plan depends on many factors. There are number of challenges in developing and maintaining BCM plan including putting the proper planning, people, and technology. However, a common complain of many CEOs and Directors is that BCM plans are outdated and need to be updated to account for economic, political and social environment needs. Business continuity and disaster recovery should be looked at not just in terms of business continuity and applications availability, but also for compliance reasons.


This program is aimed at delivering to the students with relevant knowledge, concepts and best practices, equipping them with the skills to develop, document, test and implement organizational BC/DRP programs and strategies effectively. This important training will enable BC professionals to remain up to date and continue to meet the current and future needs of organizations.


This course will provide the participants with the skills and knowledge, empowering them to:

i) Establish the need for a Business Continuity Management (BCM) Program and Initiate and Manage Business Continuity Management (BCM) programme.

ii) Align ICT policy with the BCM Policy and Programme Management

iii) Conduct Business Impact Analysis(BIA) to determine the impact to various business functions and systems

iv) Calculate recovery time objectives (RTO) and recovery point objectives (RPO) based on BIA

v) Develop a Continuity Framework that helps to elaborate a strategy for protecting all critical business assets

vi) Determine the risks (events or surroundings) that can adversely affect the organization and its resources (example(s) include: people, facilities, technologies) due to business interruption

vii) Explore and select the cost effective business continuity Strategies to recover the critical functions and processes

viii) Develop continuity strategies and formulate emergency response team, manage crisis and plan for communication during disasters

ix) Develop disaster recovery and business continuity procedures, plans and schedules

x) Develop service level agreements with recovery vendors and service providers

xi) Exercise and analyzing BCP/DRP test results and drills to verify that the plan works as intended

For more information please contact us through 0713 451713 or 0764 978313
Sam Mujinja---

 

[mzee wa ndonga]

Tuko kwenye final prepartion za darasa la CISA litakaloanza jumatatu ya trh 11/01/2016.
tunazidi kuwakumbusha wale ambao bado hawajafanya usajili wafanye kwani nafasi ni chache na hatuchukui wanafunzi zaidi ya 15 ili kuwe na ufanisi..
kwa mawasiliano :+255 713451713 or +255764978313
or though email address mujinja@hotmail.com contact person Sam Mujinja

 

[mzee wa ndonga]

Darasa la CISA Linaanza leo..Karibuni wote

 

[mzee wa ndonga]

Darasa la CISA limeanza rasmi leo hapa Raha Tower Floor ya 4. asanteni wote mlioweza kuanza leo na naamini mtakuwa mashuhuda wazuri wa kazi nzuri na shule nzuri mtakayoipata hapa True Ink Associates.

Nawatakia shule njema..

Sam Mujinja: Course Director

 

[mzee wa ndonga]

Darasa la CISA Limeanza toka Juzi...kwa wale ambao hawajafanikiwa kuhudhuria zimebaki nafasi mbili darasa litimie..karibuni sana..
kwa mawasiliano :

0713 451713/0764978313
contact person : Sam Mujinja

 

[mzee wa ndonga]

Leo ni siku ya pili toka tuanze review Class ya CISA..Areas of concentration includes but not limited to the following
· Knowledge of ISACA IT Audit and Assurance Standards, Guidelines, and Tools and Techniques; Code of Professional Ethics; and other applicable standards
· Knowledge of risk assessment concepts, tools and techniques in an audit context
· Knowledge of control objectives and controls related to information systems
· Knowledge of audit planning and audit project management techniques, including follow-up
· Knowledge of fundamental business processes (e.g., purchasing, payroll, accounts payable, accounts receivable) including relevant IT
· Knowledge of applicable laws and regulations that affect the scope, evidence collection and preservation, and frequency of audits
· Knowledge of evidence collection techniques (e.g., observation, inquiry, inspection, interview,
data analysis) used to gather, protect and preserve audit evidence
· Knowledge of different sampling methodologies
· Knowledge of reporting and communication techniques (e.g., facilitation, negotiation, conflict resolution, audit report structure)
· Knowledge of audit quality assurance systems and frameworks

kwa mawasiliano :

0713 451713/0764978313
contact person : Sam Mujinja

 

[mzee wa ndonga]

· Knowledge of ISACA IT Audit and Assurance Standards, Guidelines, and Tools and Techniques; Code of Professional Ethics; and other applicable standards
· Knowledge of risk assessment concepts, tools and techniques in an audit context
· Knowledge of control objectives and controls related to information systems
· Knowledge of audit planning and audit project management techniques, including follow-up
· Knowledge of fundamental business processes (e.g., purchasing, payroll, accounts payable, accounts receivable) including relevant IT
· Knowledge of applicable laws and regulations that affect the scope, evidence collection and preservation, and frequency of audits
· Knowledge of evidence collection techniques (e.g., observation, inquiry, inspection, interview,
data analysis) used to gather, protect and preserve audit evidence
· Knowledge of different sampling methodologies
· Knowledge of reporting and communication techniques (e.g., facilitation, negotiation, conflict resolution, audit report structure)
· Knowledge of audit quality assurance systems and frameworks

 

[mzee wa ndonga]

Leo siku ya tatu tunaendelea kufanya review class ya CISA..mwisho Ijumaa kupokea wanafunzi wanaotaka kujiunga nasi..
tunazidi kuwakaribisha wote..karibuni sana..