on-demand course

Ultimate CISA Certification Preparation Course

with GRC Gate

April 2026

42h 26m

English

Packt Publishing

Closed Captioning available in English

Watch now

Unlock full access

Course outline

Welcome to CISA Training [2026]
13m 11s
Domain 1 Overview: Planning and Conducting Information Systems Audit Engagements
14m 39s
Role of the Information Systems Auditor and Audit Mindset
12m 28s
Key Stakeholders: Auditor, Auditee, and Audit Client Responsibilities
11m 55s
Internal Audit vs External Audit: Assurance Objectives and Reporting Lines
13m 57s
Internal Audit Fundamentals for Information Systems Assurance
16m 41s
Audit Committee Oversight and the Audit Charter for IS Audits
11m 7s
Audit and Assurance Engagement Types Used in IS Auditing
15m 16s
Engagement Letters, Scope Agreements, and Reliance on Specialists
12m 13s
Professional Ethics and Conduct for Information Systems Auditors
10m 20s
IT Assurance Frameworks and Using the Work of Other Assurance Providers
12m 17s
Legal, Regulatory, and Contractual Requirements in IS Audit Planning
13m 18s
Using Standards and Frameworks as Audit Criteria for IS Audits
19m 9s
Audit Pre-Planning and Risk-Based Audit Planning for IS Engagements
14m 31s
Executing the IS Audit: Testing Approach, Fieldwork, and Workpaper Practices
14m 43s
Audit Evidence in IS Audits: Sufficiency, Competence, and Reliability
13m 42s
Assessing Control Design and Operating Effectiveness and Audit Risk Impact
12m 48s
Audit Reporting: Findings, Recommendations, and Audit Documentation Standards
12m 55s
Risk-Based Auditing and End-to-End Audit Lifecycle
12m 12s
Audit Sampling in IS Audits: Statistical and Non-Statistical Methods
13m 36s
Control Self-Assessment: When and How Auditors Use CSA Results
11m 46s
Computer-Assisted Audit Techniques: Planning and Performing CAATs
11m 46s
Continuous Auditing and Continuous Monitoring: Audit Use Cases and Models
13m 52s
Information System Auditing in the Era of AI
12m 52s
Auditing Business Intelligence and Analytics Environments
13m 18s
Agile Auditing - Auditing Agile Environments and Iterative Delivery Controls
11m 16s
Emerging Technology Audit Risks and Practical Audit Considerations
15m 58s
Domain 1 Reflection: Audit Judgment, Evidence Quality, & Professional Skepticism
11m 20s
Domain 2 Overview: Governance and Management of Information Technology
14m 20s
Enterprise Governance Foundations Relevant to IS Auditors
15m 15s
Information Security Governance: Oversight, Accountability, and Assurance Focus
12m 49s
IT Governance and IT Management: Audit Boundaries and Evaluation Approach
12m 18s
Auditing Governance: Structures, Decision Rights, and Performance Oversight
12m 39s
Enterprise Architecture: Audit Relevance and Governance Controls
12m 57s
Policies as Governance Instruments: Auditability and Control Intent
13m 26s
Standards as Governance Instruments: Audit Criteria and Evidence Mapping
13m 22s
Procedures and Guidelines: Operationalizing Controls for Audit Testing
11m 55s
Policy Audit Case Examples: Acceptable Use, Physical Security, and Clear Desk
13m 43s
Policy Audit Case Examples: Internet Use, Email Security, and Remote Access
16m 17s
Quality Attributes of Policies, Standards, and Procedures for Audit Readiness
15m 6s
IT Risk Management: Audit Perspective and Assurance Objectives
15m 8s
Risk Types for Audit Planning: Inherent Risk, Residual Risk, and Control Risk
12m 31s
Risk Management Frameworks: How Auditors Evaluate Implementation Quality
13m 45s
Risk Identification: Methods, Documentation, and Audit Evidence
12m 13s
Risk Analysis: Likelihood, Impact, and Control Assumptions for Audit Review
13m 29s
Risk Evaluation and Treatment: Accept, Avoid, Mitigate, Transfer and Audit Tests
14m 52s
Risk Reporting and Monitoring: KRIs, Governance Reporting, and Audit Trails
13m 22s
Auditor Role in Risk Management: Assurance, Advisory, and Independence
13m 46s
Security Controls: Control Families, Types, and Audit Test Strategies
14m 51s
Control Objectives and Compensating Controls: Evaluating Control Sufficiency
14m 49s
Defense in Depth: Audit Implications for Layered Security
12m 59s
Control Selection and Implementation: Governance Evidence and Audit Approach
11m 19s
Internal Control Frameworks: Using Control Models to Structure Audit Work
13m 17s
Control Evaluation: Design Effectiveness vs Operating Effectiveness in Practice
12m 45s
Personnel Governance and Human Resources Controls: Audit Focus Areas
12m 52s
Segregation of Duties: Conflicting Duties and Compensating Control Testing
11m 2s
Outsourcing and Third-Party Risk: Audit Approach to Vendor Governance
16m 26s
Case Study: Lessons for Auditors from the CrowdStrike Outage July 2024
10m 33s
SOC Reports: Using Service Organization Control Reports in IS Audit Work
12m 26s
Auditing IT Management Processes: Financial, Portfolio, Capacity, and Suppliers
14m 10s
IT Financial Management for Auditors: CAPEX, OPEX, ROI, and ROSI
13m 51s
Maturity and Capability Assessments: Audit Use and Continuous Improvement
13m 29s
IT Performance Management: Balanced Scorecard Evidence and Audit Evaluation
14m 5s
Quality Management in IT: Quality Assurance, Quality Control, and Audit Evidence
13m 59s
Domain 2 Reflection: Governance Assurance and Risk Oversight Outcomes
13m 37s
Domain 3 Overview: Information Systems Acquisition, Development & Implementation
20m 18s
Auditing Technology Acquisition: Governance Controls and Risk Considerations
11m 26s
Auditing Feasibility Studies and Business Cases for Technology Investments
11m 40s
Budget Requests and RFP Processes: Procurement Controls for Auditors
12m 59s
Projects and Programs: Governance Structures and Audit Criteria
14m 4s
Project Planning Controls: Scope, Objectives, and Work Breakdown Evidence
13m 5s
Schedule and Status Controls: Monitoring, Reporting, and Audit Trail Review
13m 22s
Cost Estimation Controls: Audit Review of Assumptions, Models, and Variances
14m 15s
Project Closure and Post-Implementation Review: Auditor Expectations
16m 23s
Programming Fundamentals for Auditors: What to Know to Audit Applications
17m 9s
Auditing System Development Life Cycle Models and Delivery Methods
16m 57s
Requirements Controls: SRTM Traceability, Use Cases, and Abuse Cases
15m 50s
Application Types and Architecture Context for Audit Planning
15m 39s
Software Licensing Compliance: Audit Approach to Legal and Contract Risks
15m 54s
Re-Engineering and Reverse Engineering: Audit Risks and Control Expectations
13m 36s
Application Controls: Input, Processing, Output, and Interface Control Testing
16m 42s
Auditing Testing Practices: Test Strategy, Evidence, and Defect Governance
18m 24s
Certification and Accreditation: Audit Use of Assurance Results and Evidence
15m 20s
Release and Deployment Management: Audit Controls and Evidence
15m 27s
Implementation and Changeover: Cutover Risks and Audit Verification Steps
16m 45s
Maintenance and Support Controls: Audit Focus on Stability and Integrity
13m 20s
Auditing Software Projects: End-to-End Controls and Practical Testing Plan
15m 18s
Change Management: Audit Criteria, Approval Controls, and Traceability
16m 3s
Configuration Management: Baselines, CMDB Evidence, and Audit Testing
15m 41s
Version Control Systems: Audit Evidence for Integrity and Segregation
14m 13s
Patch and Vulnerability Management: Audit Approach to Timeliness and Coverage
13m 39s
Auditing Virtualization Environments: Control Risks and Assurance Tests
14m 25s
Auditing Cloud Services: Shared Responsibility and Control Assurance
14m 53s
Cloud Deployment Models: Audit Considerations for Public, Private, and Hybrid
12m 31s
Domain 3 Reflection: Delivery Governance and Control Assurance Quality
11m 51s
Domain 4 Overview Information Systems Operations and Business Resilience
15m 25s
Auditing IT Operations Management Governance, Processes, and Metrics
14m 28s
IT Asset Management Audits Lifecycle Controls and Evidence Requirements
11m 17s
End-User Computing and Shadow IT Audit Risks and Detection Techniques
9m 12s
Job Scheduling and RPA Auditing Automated Operations and Bot Controls
11m 38s
Auditing Application Architecture Control Points and Assurance Objectives
14m 10s
Auditing Network and Security Architecture Segmentation and Control Validation
12m 34s
IT Infrastructure Components for Auditors What to Evaluate and Why
13m 9s
Enterprise Computing Operations Audit View of Platforms and Service Delivery
13m 39s
Preventive Maintenance and Operational Security Audit Evidence and Testing
12m 26s
Incident Management Audits Detection, Triage, and Closure Controls
16m 18s
Incident Response Plans Audit Readiness, Testing, and Execution Evidence
15m 45s
Digital Forensics Evidence Handling, Chain of Custody, and Audit Considerations
14m 56s
Security Operations Centers Auditing Monitoring Capabilities and Coverage
15m 30s
Operational Logging Audit Requirements for Log Generation and Retention
16m 22s
Audit Trails and SIEM Evaluating Use Cases, Integrity, and Alert Governance
15m 31s
File Integrity Monitoring Audit Use and Control Effectiveness Review
13m 20s
EDR, NDR, XDR, and SOAR Auditing Detection and Response Tooling
14m 21s
Database Fundamentals for Auditors Data Structures and Control Touchpoints
13m 14s
Keys and Integrity Auditing Referential Integrity and Data Quality Controls
15m 20s
Database Security Controls Access, Hardening, and Activity Monitoring Audits
18m 0s
Database Resilience Backup, Recovery, and High Availability Audit Tests
13m 57s
Networking Fundamentals for IS Auditors Control Relevance and Risk
20m 51s
OSI and TCPIP Models for Auditors Mapping Controls to Network Layers
24m 20s
Auditing Physical Layer Controls Facilities, Cabling, and Environmental Factors
26m 13s
Auditing Data Link Controls VLANs, Switching, and Layer Two Security
17m 18s
Auditing Network Layer Controls Routing, Segmentation, and Layer Three Risks
20m 27s
Auditing Layers Four Through Seven Services, Applications, and Protocol Risks
21m 22s
Disaster Recovery Planning Audits Governance, Testing, and Capability Evidence
15m 51s
Business Continuity Audits Business Impact, Strategy, and Operational Readiness
17m 7s
Recovery Metrics RPO, RTO, AIW, SDO, and MTO in Audit Evaluations
16m 5s
Recovery Strategies Alternate Sites, Processing Options, and Audit Evidence
15m 57s
BCP and DRP Testing Audit Evaluation of Exercising and Remediation Tracking
15m 52s
Business Continuity Policy Audits Scope, Ownership, and Compliance Evidence
16m 21s
Backup Controls Auditing Backup Design, Execution, and Restoration Testing
15m 1s
Server and Application Security with Backup Policy Audit Verification Approach
17m 35s
Storage Technologies for Auditors Risks, Controls, and Assurance Tests
15m 21s
Auditing Redundant Array of Independent Disks Resilience Design and Monitoring
18m 18s
Domain 4 Reflection Operational Reliability and Resilience Assurance
17m 56s
Domain 5 Overview - Protection of Information Assets
11m 48s
Information Security Objectives - Confidentiality Integrity and Availability
13m 26s
Core Security Terminology for IS Audits Aligning Language to Audit Criteria
11m 50s
Vulnerability Concepts Audit Relevance and Control Assurance Approach
11m 0s
Malware Risks Auditing Prevention Detection and Response Controls
13m 38s
Denial of Service Risks Auditing Availability Controls and Capacity Measures
13m 20s
Man-in-the-Middle Risks Auditing Network Trust and Encryption Controls
12m 29s
Attack Lifecycle Models Using Kill Chain Concepts for Control Validation
11m 45s
IAM Governance Auditing Identity Lifecycle and Access Control Management
13m 25s
Authentication Authorization and Accountability Audit Criteria and Evidence
14m 29s
Multi-Factor Authentication and Biometrics Audit Testing and Exception Review
12m 51s
Single Sign-On and Reduced Sign-On Auditing Federation and Access Flows
12m 39s
Active Directory and LDAP Auditing Directory Services and Privileged Access
15m 16s
Account and Password Policies Auditing Access Governance and Compliance
15m 3s
Network Segmentation Auditing Trust Boundaries and Lateral Movement Controls
13m 42s
Firewalls Auditing Rule Governance Logging and Change Control
13m 55s
DMZ Bastion Hosts and Honeypots Auditing Boundary Defense Designs
13m 20s
IDS and IPS Auditing Detection Coverage and Tuning Governance
12m 6s
Network Security Operations Auditing Configuration Monitoring and Hygiene
13m 48s
Network Redundancy Auditing High Availability and Failover Controls
12m 38s
Network Access and BYOD Policies Auditing Endpoint Admission and Compliance
14m 43s
Physical Security Controls Auditing Access Surveillance and Visitor Management
13m 59s
Environmental Controls Auditing Power HVAC Fire and Facility Protections
15m 37s
Operational Technology and ICS Auditing Unique Asset Protection Controls
14m 38s
Data Lifecycle Management Auditing Controls from Creation to Disposal
11m 26s
Data Classification Auditing Classification Schemes and Handling Requirements
13m 56s
Data Destruction Auditing Media Sanitization and Disposal Evidence
10m 58s
Data Protection Policies Auditing Handling Rules and Enforcement Controls
14m 16s
Asset Ownership and Custodianship Auditing Accountability for Data Protection
11m 38s
Symmetric Encryption Auditing Key Handling and Implementation Controls
12m 29s
Asymmetric Encryption Auditing Key Management and Trust Models
17m 58s
Hashing and Salting Auditing Integrity Controls and Credential Protection
12m 51s
Digital Certificates Auditing Issuance Use and Validity Controls
11m 54s
Public Key Infrastructure Auditing Certificate Lifecycle Governance
13m 21s
Digital Signatures Auditing Nonrepudiation and Integrity Assurance
11m 15s
Certificate Pinning Audit Considerations and Operational Risks
11m 41s
Transport Security Auditing Secure Sockets Layer TLS and Mutual TLS Usage
12m 5s
Cryptography Use Cases Auditing Data in Transit at Rest and in Use Controls
12m 45s
Endpoint Security Auditing Baselines Hardening and Monitoring Controls
11m 13s
Endpoint Security Tools Auditing Capabilities Coverage and Alert Governance
16m 55s
Social Engineering Auditing Human Risk and Control Effectiveness
14m 49s
Security Awareness Programs Auditing Design Metrics and Continuous Improvement
11m 32s
Data Governance Auditing Stewardship Quality and Control Ownership
10m 51s
Data Governance Tooling Auditing Classification Cataloging and DLP Enablement
10m 26s
Privacy Controls Auditing Data Protection Consent and Regulatory Alignment
14m 32s
Domain 5 Reflection Asset Protection Assurance and Control Effectiveness
14m 11s

Overview

In this 42-hour course, you will build a strong foundation in information systems auditing, covering core principles, frameworks, and governance models. You will progress through audit planning, risk evaluation, evidence collection, and reporting while applying concepts through real-world scenarios.

What I will be able to do after this course

Understand IS auditing fundamentals and risk management frameworks
Apply audit techniques to evaluate controls and effectiveness
Analyze and assess audit risks, including inherent and residual risks
Understand governance models and their role in audit planning
Develop audit reports with clear findings and recommendations

Course Instructor(s)

GRC Gate is a cybersecurity and governance training provider focused on practical, real-world learning. Their courses use structured instructional design and evolve with industry standards. They support global learners through clear explanations, scenarios, and practice-driven training.

Who is it for?

This course is designed for information systems auditors, IT professionals, and business analysts. It suits those with basic auditing knowledge seeking to advance their auditing and risk assessment skills.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Watch now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

What Successful Brick-and-Mortar Retailers Get Right

Publisher Resources

ISBN: 9781807780135

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills