CISA Review Class Starts on 14/03/2016

[mzee wa ndonga]

Ijumaa tulimaliza Chapter 1 na leo tarehe 21/03/2016 tunaanza chapter II.
Tunawakaribisha wote

 

[mzee wa ndonga]

Leo tunaendelea na module II ya cisa review class..karibuni wote..

Domain 2—Governance and Management of IT
Provide assurance that the necessary leadership and organizational structures and processes are in place to achieve objectives and to support the organization's strategy. (16%)

Task Statements:
2.1 Evaluate the IT strategy, including IT direction, and the processes for the strategy’s development, approval, implementation and maintenance for alignment with the organization’s strategies and objectives.
2.2 Evaluate the effectiveness of the IT governance structure to determine whether IT decisions, directions and performance support the organization’s strategies and objectives.
2.3 Evaluate IT organizational structure and human resources (personnel) management to determine whether they support the organization’s strategies and objectives.
2.4 Evaluate the organization’s IT policies, standards and procedures, and the processes for their development, approval, release/publishing, implementation and maintenance to determine whether they support the IT strategy and comply with regulatory and legal requirements.
2.5 Evaluate IT resource management, including investment, prioritization, allocation and use, for alignment with the organization’s strategies and objectives.
2.6 Evaluate IT portfolio management, including investment, prioritization and allocation, for alignment with the organization’s strategies and objectives.
2.7 Evaluate risk management practices to determine whether the organization’s IT-related risk is identified, assessed, monitored, reported and managed.
2.8 Evaluate IT management and monitoring of controls (e.g., continuous monitoring, quality assurance [QA]) for compliance with the organization’s policies, standards and procedures.
2.9 Evaluate monitoring and reporting of IT key performance indicators (KPIs) to determine whether management receives sufficient and timely information.
2.10 Evaluate the organization’s business continuity plan (BCP), including alignment of the IT disaster recovery plan (DRP) with the BCP, to determine the organization’s ability to continue essential business operations during the period of an IT disruption.
Knowledge Statements:
2.1 Knowledge of the purpose of IT strategy, policies, standards and procedures for an organization and the essential elements of each
2.2 Knowledge of IT governance, management, security and control frameworks, and related standards, guidelines and practices
2.3 Knowledge of the organizational structure, roles and responsibilities related to IT, including segregation of duties (SoD)
2.4 Knowledge of the relevant laws, regulations and industry standards affecting the organization
2.5 Knowledge of the organization’s technology direction and IT architecture and their implications for setting long-term strategic directions
2.6 Knowledge of the processes for the development, implementation and maintenance of IT strategy, policies, standards and procedures
2.7 Knowledge of the use of capability and maturity models
2.8 Knowledge of process optimization techniques
2.9 Knowledge of IT resource investment and allocation practices, including prioritization criteria (e.g., portfolio management, value management, personnel management)
2.10 Knowledge of IT supplier selection, contract management, relationship management and performance monitoring processes, including third-party outsourcing relationships
2.11 Knowledge of enterprise risk management (ERM)
2.12 Knowledge of the practices for monitoring and reporting of controls performance (e.g., continuous monitoring, quality assurance [QA])
2.13 Knowledge of quality management and quality assurance (QA) systems
2.14 Knowledge of the practices for monitoring and reporting of IT performance (e.g., balanced scorecard [BSC], key performance indicators [KPIs])
2.15 Knowledge of business impact analysis (BIA)
2.16 Knowledge of the standards and procedures for the development, maintenance and testing of the business continuity plan (BCP)
2.17 Knowledge of the procedures used to invoke and execute the business continuity plan (BCP) and return to normal operations

karibuni.. wote..
Kwa maelezo zaidi tuwasiliane kwa kupitia 0713 451713 ama 0764 978313

 

[mzee wa ndonga]

CISA Certification:

• 
  Confirms your knowledge and experience
• Quantifies and markets your expertise
• Demonstrates that you have gained and maintained the level of knowledge required to meet the dynamic challenges of a modern enterprise
• Is globally recognized as the mark of excellence for the IS audit professional
• Combines the achievement of passing a comprehensive exam with recognition of work and educational experience, providing you with credibility in the marketplace.
• Increases your value to your organization
• Gives you a competitive advantage over peers when seeking job growth
• Helps you achieve a high professional standard through ISACA’s requirements for continuing education and ethical conductKwa maelezo zaidi tuwasiliane kwa kupitia 0713 451713 ama 0764 978313
  ama kwa email mujinja@hotmail.com
  
  karibuni wote...

 

[mzee wa ndonga]

0713 451713 or 0764 978313

ama tuandikie email mujinja@hotmail.com

Sam Mujinja--

 

[mzee wa ndonga]

True Ink Associates has been authorized by the ISACA Tanzania Lo-cal Chapter to conduct CISA, CISM trainings in Tanzania, and has reputable and experienced trainers. ISACA Tanzania Local Chapter represents and governs all ISACA activities in Tanzania including providing assurance that CISA Training institutions meet the minimum standards of the respective ISACA’s curricu-lum and the trainers have required competence to facilitate the review courses.
 Because we understand that the CISA/CISM exam contents vary from practical technical ICT matters to practical technical IS au-diting skills, our courses are conducted by a minimum of four (4) facilitators, each with hands-on experience and technical knowledge of the designated area hence provide in-depth knowledge transfer to students within the facilitator’s highly spe-cialized field of competence. All of the facilitators conducting the course are Certified Information Systems Auditors (CISAs) and hold other Certification like CISM, ITIL, PMP, ISO 27001 Lead Auditor,

We offer the following:
 Training on Information Systems audit and Security Courses (CISA, CISM, COBIT 5, ITIL, ISO 27001 Lead Auditor, CEH)
 Consultancy Services on Information Systems Control, Governance and Security
 Training on Governance, Risk Management and Internal Audit, Value for Money and Perfor-mance Audit
 Internal Audits on Governance, Risk Manage-ment and Controls
 Training Database Management and Database Administration and Security
 Tailor-made Seminars and Workshops

for more please contact us through

0713 451713 or 0764 978313
mujinja@hotmail.com

 

[mzee wa ndonga]

Kesho tunaanza Chapter 4..areas to be covered

Domain 4—Information Systems Operations, Maintenance and Service Management
Provide assurance that the processes for information systems operations, maintenance and service management meet the organization’s strategies and objectives. (20%)

Task Statements:
4.1 Evaluate the IT service management framework and practices (internal or third party) to determine whether the controls and service levels expected by the organization are being adhered to and whether strategic objectives are met.
4.2 Conduct periodic reviews of information systems to determine whether they continue to meet the organization’s objectives within the enterprise architecture (EA).
4.3 Evaluate IT operations (e.g., job scheduling, configuration management, capacity and performance management) to determine whether they are controlled effectively and continue to support the organization’s objectives.
4.4 Evaluate IT maintenance (patches, upgrades) to determine whether they are controlled effectively and continue to support the organization’s objectives.
4.5 Evaluate database management practices to determine the integrity and optimization of databases.
4.6 Evaluate data quality and life cycle management to determine whether they continue to meet strategic objectives.
4.7 Evaluate problem and incident management practices to determine whether problems and incidents are prevented, detected, analyzed, reported and resolved in a timely manner to support the organization´s objectives.
4.8 Evaluate change and release management practices to determine whether changes made to systems and applications are adequately controlled and documented.
4.9 Evaluate end-user computing to determine whether the processes are effectively controlled and support the organization’s objectives.
4.10 Evaluate IT continuity and resilience (backups/restores, disaster recovery plan [DRP]) to determine whether they are controlled effectively and continue to support the organization’s objectives.
Knowledge Statements:
4.1 Knowledge of service management frameworks
4.2 Knowledge of service management practices and service level management
4.3 Knowledge of the techniques for monitoring third-party performance and compliance with service agreements and regulatory requirements
4.4 Knowledge of enterprise architecture (EA)
4.5 Knowledge of the functionality of fundamental technology (e.g., hardware and network components, system software, middleware, database management systems)
4.6 Knowledge of system resiliency tools and techniques (e.g., fault-tolerant hardware, elimination of single point of failure, clustering)
4.7 Knowledge of IT asset management, software licensing, source code management and inventory practices
4.8 Knowledge of job scheduling practices, including exception handling
4.9 Knowledge of the control techniques that ensure the integrity of system interfaces
4.10 Knowledge of capacity planning and related monitoring tools and techniques
4.11 Knowledge of systems performance monitoring processes, tools and techniques (e.g., network analyzers, system utilization reports, load balancing)
4.12 Knowledge of data backup, storage, maintenance and restoration practices
4.13 Knowledge of database management and optimization practices
4.14 Knowledge of data quality (completeness, accuracy, integrity) and life cycle management (aging, retention)
4.15 Knowledge of problem and incident management practices
4.16 Knowledge of change management, configuration management, release management and patch management practices
4.17 Knowledge of the operational risk and controls related to end-user computing
4.18 Knowledge of the regulatory, legal, contractual and insurance issues related to disaster recovery
4.19 Knowledge of business impact analysis (BIA) related to disaster recovery planning
4.20 Knowledge of the development and maintenance of disaster recovery plans (DRPs)
4.21 Knowledge of the benefits and drawbacks of alternate processing sites (e.g., hot sites, warm sites, cold sites)
4.22 Knowledge of disaster recovery testing methods
4.23 Knowledge of the processes used to invoke the disaster recovery plans (DRPs)


Kwa maelezo zaidi tuwasiliane kwa kupitia 0713 451713 ama 0764 978313
ama kwa email mujinja@hotmail.com

 

[mzee wa ndonga]

For more information contact us through +255 713451713 or +255764978313
or though email address mujinja@hotmail.com contact person Sam Mujinja

karibuni Wote

 

[mzee wa ndonga]

Please join us..for more information call us on 0713 451713 or 0764 978313

 

[mzee wa ndonga]

karibuni wote

 

[mzee wa ndonga]

karibuni wote