Mimir, Keeper of the Well of Wisdom
CISA Cert Masterclass - Pass the Exam in 2026 (+20 CPE)
https://www.udemy.com/course/cisa-cert/
Year : 2026
Language : English
Level : All Levels
Category : IT & Software
Subcategory : IT Certifications
Duration : 20h 11m
Lectures : 135
Rating : 4.7/5 (158 reviews)
Students : 789
INSTRUCTOR(S)
HEADLINE
Complete CISA certification prep: IT audit, governance,
systems development, operations, and security across all
domains
WHAT YOU'LL LEARN
* Apply ISACA's IT audit framework including audit planning,
evidence collection, and reporting standards
* Evaluate IT governance structures including strategy,
enterprise architecture, and regulatory compliance
* Assess information systems acquisition and development
controls across the full SDLC
* Analyze IT operations and resilience including change
management, BC/DR, and infrastructure controls
* Evaluate information asset protection through access
controls,
encryption, and vulnerability management
* Build and maintain an IT audit quality assurance program
aligned to ISACA standards
* Translate technical findings into business risk terms for
executive and board-level reporting
* Prepare for the CISA certification exam using structured
domain-by-domain study
REQUIREMENTS
* No specific prerequisites required. Some familiarity with IT
operations, audit, or governance concepts is helpful but not
mandatory ? this course teaches everything from the ground
up.
WHO IS THIS COURSE FOR
* IT professionals preparing for the ISACA CISA certification
exam who want to advance their career in IT audit,
governance,
and compliance.
* IT auditors and internal auditors who want to formalize
their
expertise and earn the CISA designation.
* IT professionals with 3?5+ years of experience in systems,
operations, or security roles who are ready to move into
audit
or governance positions.
* Compliance analysts and GRC professionals who need a deep
understanding of IT audit methodology and control frameworks
to advance their careers.
* Risk managers and security managers who work alongside audit
teams and want to understand how IS audits are scoped,
executed, and reported.
* External auditors and public accounting professionals
expanding their practice into IT audit and SOX ITGC reviews.
* Recent graduates with degrees in information systems,
cybersecurity, or accounting who are building toward the
CISA
as an entry-level professional credential.
* Anyone studying for the CISA certification exam who wants a
structured, instructor-led course that goes deeper than the
CISA Review Manual alone.
DESCRIPTION
This course is a complete, structured study program for the
ISACA Certified Information Systems Auditor (CISA) exam. Built
domain by domain against the official CISA exam blueprint, it
covers every topic area you need to understand before sitting
for the exam ? from audit methodology and IT governance
through
systems development, IT operations, and information security.
If
you are an IT auditor, internal auditor, compliance analyst,
GRC
professional, or security manager targeting the CISA
certification, this course gives you a study path you can
follow
from start to finish. Domain 1 ? Information Systems Auditing
Process (18% of the exam) ? covers everything involved in
planning and executing an IT audit engagement. Topics include
audit planning and scope definition, risk-based audit
approaches, evidence collection techniques, sampling methods,
audit documentation, reporting findings to management,
following
up on corrective actions, and building and maintaining a
quality
assurance program aligned to ISACA standards. You will
understand how to apply IS audit standards and guidelines in
real engagements and how to document findings in ways that
hold
up to scrutiny from regulators, external auditors, and audit
committees. Domain 2 ? Governance and Management of IT (18%) ?
covers the frameworks and structures organizations use to
align
IT with business objectives. Topics include IT governance
frameworks (COBIT, ITIL, ISO 38500), enterprise architecture
models, IT strategy and portfolio management, IT
organizational
structures, data governance, IT-related laws and regulations
(SOX, GDPR, HIPAA, PCI DSS, GLBA, FERPA), third-party
management, and IT performance monitoring using KPIs and KRIs.
You will understand how auditors evaluate whether IT
governance
structures are effective and how they assess regulatory
compliance programs. Domain 3 ? Information Systems
Acquisition,
Development, and Implementation (12%) ? covers the controls
auditors evaluate across the full systems development
lifecycle.
Topics include project management governance (PMI, PRINCE2),
SDLC methodologies (waterfall, Agile, DevOps), requirements
definition and change control, software development controls,
testing types and test management, configuration management,
release management, post-implementation review, and
acquisition
and vendor selection processes. Understanding these controls
is
essential for auditors who review ERP implementations, cloud
migrations, custom software projects, and enterprise system
upgrades. Domain 4 ? Information Systems Operations and
Business
Resilience (26%) ? is one of the two largest domains on the
exam. Topics include IT infrastructure components and
management, IT asset management (hardware and software), IT
service management (ITIL), change and patch management,
incident
and problem management, database administration controls,
network infrastructure and monitoring, cloud operations,
business continuity planning (BCP), disaster recovery planning
(DRP), backup and recovery strategies, RTO and RPO targets,
and
business impact analysis (BIA). Auditors who can evaluate
resilience programs against frameworks like NIST SP 800-34 and
ISO 22301 are in high demand across industries subject to
regulatory scrutiny. Domain 5 ? Protection of Information
Assets
(26%) ? covers the security controls that auditors evaluate to
determine whether sensitive data and systems are adequately
protected. Topics include information security governance and
policy, data classification frameworks, identity and access
management (IAM), privileged access management, multi-factor
authentication, network security controls (firewalls, IDS/IPS,
VPN, WAF, network segmentation), encryption standards and key
management, public key infrastructure (PKI), endpoint
protection, vulnerability management programs, penetration
testing oversight, security incident response, security
awareness and training programs, and privacy program controls.
This domain maps closely to ISO 27001/27002, NIST CSF, and
NIST
SP 800-53 ? frameworks that appear frequently in CISA exam
scenarios. This course is built differently from reading the
CISA Review Manual cover to cover. Each lesson is a narrated
video that explains how concepts connect to each other and to
real audit work ? not just what the definition is, but how an
auditor applies it. Every domain includes practice questions
designed to mirror the style and difficulty of CISA exam
scenarios, covering not just recall but application and
analysis. The course closes with two full-length practice
exams
with detailed answer explanations, so you can measure your
readiness and focus your remaining study time where it matters
most. Major topics covered: IT audit standards, ISACA code of
ethics, audit charter, control objectives, audit risk,
materiality, sampling, evidence, audit reporting, COBIT 2019,
IT
governance frameworks, enterprise architecture, IT strategy,
data governance, SOX compliance, GDPR, HIPAA, PCI DSS, SDLC
controls, Agile audit, project management controls, change
management, patch management, ITIL service management, BCP/DR,
RTO/RPO, BIA, cloud security, access control models,
encryption,
IAM, MFA, network security, vulnerability management, ISO
27001,
NIST CSF, NIST SP 800-53, incident response, GRC, compliance
audit, information systems audit, CISA exam prep 2026.
COURSE CONTENT
Chapter 1: Introduction
1. Course Introduction
Chapter 2: Domain 1 - Information System Auditing Process
2. IS Audit Standards and Professional Ethics
3. Applying Audit Standards and Guidelines
4. Quick Check-In
5. Understanding Audit and Assessment Types
6. Executing and Evaluating Audits
7. Principles of Risk-Based Audits
8. Developing and Adjusting the Audit Plan
9. Control Concepts, Classifications, and Governance
Foundations
10. Evaluating Control Design, Adequacy, and Effectiveness
11. Executing, Supervising, and Delivering the Audit Project
12. Planning and Organizing the Audit Engagement
13. Testing Objectives, Techniques, and Sampling
Fundamentals
14. Interpreting Results and Managing Sampling Risk
15. Gathering Reliable and Sufficient Audit Evidence
16. Evaluating, Interpreting, and Documenting Audit Evidence
17. Leveraging Data Analytics and Automation in Auditing
18. Designing, Validating, and Governing Analytic Audit
Procedures
19. Structuring and Writing Clear, Objective Audit Reports
20. Delivering Findings, Managing Disputes, and Ensuring
Follow-Up
21. Establishing a Quality Assurance and Improvement
Framework
22. Sustaining Audit Excellence Through Continuous
Improvement
Chapter 3: Domain 2 - Governance and Management of IT
23. Foundations of IT Compliance
24. Governance, Ethics, and Continuous Compliance
25. Building Effective IT Governance
26. Aligning IT Strategy with Enterprise Goals
27. Governance Maturity and IT Portfolio Management
28. Frameworks That Define IT Behavior
29. Monitoring and Enforcing IT Policy Compliance
30. Blueprint for Business and IT Alignment
31. Auditing EA for Governance and Risk
32. Foundations of Enterprise Risk Management
33. Integrating Risk Management with Strategy
34. Privacy Programs and Principles
35. Managing Privacy Risk and Compliance
36. Managing Data as a Strategic Asset
37. Auditing Data Governance and Retention
38. Aligning IT Resources with Strategy
39. Measuring and Optimizing IT Resources
40. Governing Third-Party Relationships
41. Evaluating Vendor Performance and Risk
42. Embedding Quality in IT Processes
43. Auditing Quality Systems and Continuous Improvement
44. Integrating Legal and Regulatory Governance
45. Evolving Compliance and Ethical Accountability
Chapter 4: Domain 3 - Information Systems Acquisition,
Development, and Implementation
46. Foundations of IT Project Governance
47. Managing Projects for Success
48. Audit Oversight and Risk Management
49. Building the Business Case
50. Feasibility and Auditor Review
51. Development Lifecycle Overview
52. Comparing Waterfall, Agile, and Hybrid Models
53. Audit Implications in Modern Development
54. Understanding Control Objectives
55. Designing Controls into Systems
56. Evaluating Control Design Effectiveness
57. Preparing for Go-Live
58. Testing Strategies and Validation Controls
59. Checkpoint 2. Halfway!
60. Implementation Assurance and Deployment Review
61. Configuration Management Fundamentals
62. Managing Releases and Version Control
63. Change Governance and Audit Evaluation
64. Migration Planning and Risk Management
65. Data Conversion and Post-Migration Review
66. Purpose of Post-Implementation Reviews
67. Continuous Improvement and Audit Follow-Up
Chapter 5: Domain 4 - Information Systems Operations and
Business Resilience
68. Understanding Core IT Infrastructure
69. Auditing IT Infrastructure and Operations
70. Lifecycle and Control of IT Assets
71. Auditing IT Asset Governance and Compliance
72. Managing Scheduled Jobs and Workload Automation
73. Auditing Job Scheduling Controls
74. Design and Control of System Interfaces
75. Auditing Interface Integrity
76. Identifying and Managing Shadow IT Risks
77. Auditing End-User Applications and Controls
78. Designing for Availability and Performance
79. Auditing Availability and Capacity Controls
80. Incident Response and Root Cause
81. Auditing Incident and Problem Processes
82. Governance of Change and Patch Processes
83. Auditing Change and Patch Effectiveness
84. Logging and Monitoring Principles
85. Auditing Log Collection and Analysis
86. Developing and Monitoring Service Level Agreements
87. Auditing Service Level Compliance
88. Database Structure and Integrity Controls
89. Auditing Database Security and Recovery
90. Business Impact Analysis and Recovery Objectives
91. Auditing the BIA Process and Outputs
92. Building Resilient Systems and Processes
93. Auditing Resilience and Testing Effectiveness
94. Designing Backup and Retention Strategies
95. Auditing Backup and Restoration Controls
96. The Business Continuity Plan
97. Auditing Continuity Planning and Testing
98. Disaster Recovery: Restoring IT Systems and
Infrastructure
99. Auditing Disaster Recovery Effectiveness
Chapter 6: Domain 5 - Protection of Information Assets
100. Building the Foundation of Information Security
Governance
101. Implementing and Auditing Security Governance Controls
102. Securing the Physical Infrastructure
103. Auditing Physical and Environmental Security
104. Controlling Access to Information Systems
105. Evaluating Access Controls and Audit Practices
106. Network and Endpoint Security
107. Cabling, Firewalls, and Network Architecture Audit
Focus
108. Network Architecture Audit Focus
109. Understanding Data Loss Prevention (DLP)
110. Auditing and Evaluating DLP Effectiveness
111. Fundamentals of Encryption and Cryptographic Management
112. Auditing Cryptographic Implementation
113. Public Key Infrastructure (PKI)
114. Auditing PKI Controls and Certificate Management
115. Understanding Cloud Service Models and Virtualization
116. Auditing Security in Cloud and Virtual Systems
117. Securing Mobile, Wireless, and IoT Ecosystems
118. Auditing Mobile and IoT Security Controls
119. Security Awareness Training Programs
120. Measuring and Auditing Awareness Program Effectiveness
121. Attack Methods and Techniques
122. Detecting, Preventing, and Auditing Cyberattacks
123. Conducting Security Assessments and Vulnerability Scans
124. Auditing Security Testing Governance and Results
125. Fundamentals of Security Monitoring and Logging
126. Checkpoint 3: Almost done!
127. Advanced Monitoring, Cloud Visibility, and Audit
Evaluation
128. Incident Response Plans
129. Post-Incident Review and Audit Responsibilities
130. Fundamentals of Digital Evidence Handling
131. Forensic Analysis, Reporting, and Audit Evaluation
132. Course Wrap-Up. Congratulations!
Chapter 7: Exams and Test Prep
133. Watch this before your first Practice Test
134. Watch before the second Practice Test
135. Final Video and Wrap-Up
DATES
Published : 2025-11-14
Last Updated : 2026-05-19
If you fear the truth, dont come to my well.