Information Systems Auditor (2022)

信息系统已成为任何现代组织不可分割的一部分。许多业务流程现在都依赖于信息系统，这些系统中包含的数据对任何企业都至关重要。保护和保护这些系统的需求也与它们的使用量增加成正比。随着信息系统变得如此重要，包括但不限于勒索软件、数据盗窃、黑客攻击、伪造和暴力破解的攻击和威胁也在增加。越来越多的攻击者瞄准了控制和保护较少的组织。本课程让考生准备好实施有效的控制和政策，以保护他们的信息系统和资产免受未经授权的访问和泄漏。

信息系统审计师课程是一门综合性课程，旨在帮助考生熟悉信息系统审计流程、治理、IT 管理、信息系统运营、维护和支持、信息系统运营和业务弹性以及保护的信息资产。

这些信息系统或资产可以是数据库、文件、图像、文档和软件的形式。该课程涵盖了保护方法和技术，无论数据在组织内以何种形式存在。

成功完成本课程后，学生将能够

· 了解 IS 审计流程

· 计划审核

· 进行风险分析

· 建立内部控制

· 了解 IS 审计的不同阶段

· 了解治理在 IT/IS 中的作用

· 制定政策、程序并识别风险

· 创建信息安全政策文件

· 对政策文件进行管理评审

· 进行风险管理

· 制定内包和外包策略

· 执行组织质量管理

· 创建项目管理结构

· 介绍应用开发最佳实践

· 规划 IS 运营和业务弹性计划

· 定义 RPO/RTO

· 制定灾难恢复计划

· 保护信息资产

· 识别暴露和漏洞

· 了解加密在数据保护中的作用

· 学习计算机取证的基础知识

总体而言，该课程涉及成为有效的信息系统审计员并有效执行任务所需的所有方面。本课程还帮助考生准备相关认证，即 CISA，因为考试主题与本课程教授的概念一致。

MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English + srt | Duration: 184 lectures (10h 6m) | Size: 1.78 GB

All about Audit

What you’ll learn
Understand the IS audit process
Plan audit and Perform risk analysis
Learn about different phases of IS audit
Understand the role of governance in IT/IS
Make policies, procedures and identify risks
Create information security policy document
Conduct management reviews of the policy document
Create insourcing and outsourcing strategy

Requirements
It is expected that the candidates taking part in this course have a basic know-how of the information security management, business critical information, cyber security, data loss protection and other technologies.
However, this course comprehensively covers the topics related to information systems auditing and policy making.

Description
Information systems have become an integral part of any modern organization. Many of the business processes are now dependent on the information systems and the data contained in these systems is of critical importance to any enterprise. The need to protect and safeguard these systems is also directly proportional to the increase in their usage. With the information systems becoming so important, the attacks and threats including but not limited to ransomware, data theft, hacking, forgery and brute force are also on the rise. More and more attackers are targeting organization with less control and protection. This course prepares the candidates to put in place effective controls and policies to protect their information systems and assets from unauthorized access and leakage.

Information systems auditor course is a comprehensive course designed with the objective of preparing the candidates to be able to familiarize themselves with the IS audit process, governance, management of IT, IS operations, maintenance and support, IS operations and business resilience as well as protection of information assets.

These information systems or assets can be in the form of databases, files, images, documents and software. The course covers the protection methods and techniques regardless of the form the data is residing within the organization.

After successfully completing this course, the students will be able to

· Understand the IS audit process

· Plan audit

· Perform risk analysis

· Put in place internal controls

· Learn about different phases of IS audit

· Understand the role of governance in IT/IS

· Make policies, procedures and identify risks

· Create information security policy document

· Conduct management reviews of the policy document

· Perform risk management

· Create in-sourcing and outsourcing strategy

· Perform organizational quality management

· Create project management structure

· Introduce application development best practices

· Plan IS operations and business resiliency plans

· Define RPO/RTO

· Develop disaster recovery plan

· Protect information assets

· Identify exposures and vulnerabilities

· Understand role of encryption in data protection

· Learn the basics of computer forensics

Overall, the course touches all the aspects required to become an effective information systems auditor and perform the taks efficiently. This course also helps the candidates to prepare for the relevant certification, i.e., CISA as the exam topics are in alignment with the concepts taught in this course.

Who this course is for
· Information systems auditors
· Chief information security officers
· Manager information security
· Manager cyber security
· Information system managers
· Candidates aspiring for CISA certification