CISA Sample Questions

CISA - Certified Information Systems Audit

The Information Systems Audit and Control Association (ISACA) based in Illinois, U.S.A, a body of over 35000 Information Systems (IS) Audit Professionals with over 170 chapters spread over nearly 100+ countries will administer the Certified Information Systems Audit (CISA) Examination for the 22nd consecutive year.

CISA sample questions contains 7 domains. These are as follows:

• The IS Audit Process:
  Conduct IS audits in accordance with generally accepted IS audit standards and guidelines to ensure that the organization’s information technology and business systems are adequately controlled, monitored and assessed.

• Management, Planning and Organization of IS:
  Evaluate the strategy, policies, standards, procedures and related practices for the management, planning and organization of IS.

• Technical Infrastructure and Operational Practices:
  Evaluate the effectiveness and efficiency of the organization’s implementation and ongoing management of technical and operational infrastructure to ensure that they adequately support the organization’s business objectives.

• Protection of Information Assets:
  Evaluate the logical, environmental and IT infrastructure security to ensure that it satisfies the organization’s business requirements for safeguarding information assets against unauthorized use, disclosure, modification, damage or loss.

• Disaster Recovery and Business Continuity:
  Evaluate the process for developing and maintaining documented communicated and tested plans for continuity of business operations and IS processing in the event of a disruption.

• Business Application System Development, Acquisition, Implementation and Maintenance:
  Evaluate the methodology and processes by which the business application system development, acquisition, implementation and maintenance are undertaken to ensure that they meet the organization’s business objectives.

• Business Process Evaluation and Risk Management:
  Evaluate business systems and processes to ensure that risks are managed in accordance with the organization’s business objectives.