CISA Prep Course

Lesson 1 • Exam Structure and Domain Weights

Breaks down the five exam domains and their percentage weights. Provides a scoring framework to guide study prioritization.

Lesson 2 • Study Planning and Resource Selection

Guides creation of a personalized study schedule aligned to domain weights. Introduces official and supplementary study materials.

Lesson 3 • Eligibility and Registration Process

Details work experience requirements and the application workflow. Ensures learners understand prerequisites before committing to exam dates.

Lesson 1 • Risk-Based Audit Planning

Covers risk assessment techniques used to scope and prioritize audit engagements. Links risk identification to audit objective setting.

Lesson 2 • Audit Evidence and Testing Techniques

Explains types of audit evidence and methods for gathering sufficient, reliable data. Connects evidence quality to audit conclusion validity.

Lesson 3 • Control Evaluation and Testing

Teaches evaluation of preventive, detective, and corrective controls. Prepares learners to assess control design and operating effectiveness.

Lesson 4 • Audit Standards and Professional Ethics

Introduces IS audit standards, guidelines, and the code of professional ethics. Establishes the compliance baseline for all audit activities.

Lesson 1 • IT Strategic Planning and Alignment

Covers alignment of IT strategy with business goals and investment planning. Links strategic planning to audit scope for governance reviews.

Lesson 2 • IT Performance Monitoring and Reporting

Teaches use of KPIs, KRIs, and balanced scorecards to monitor IT performance. Connects metrics to audit evidence for governance assessments.

Lesson 3 • IT Policies, Procedures, and Standards

Explains the hierarchy of IT policies and their role in governance compliance. Prepares learners to audit policy completeness and enforcement.

Lesson 4 • IT Human Resource Management

Covers hiring, training, segregation of duties, and succession planning in IT. Connects HR controls to audit procedures for personnel risk.

Lesson 1 • Project Management and Control

Examines project governance, scope management, and change control processes. Links project controls to audit procedures for IS implementations.

Lesson 2 • Systems Development Lifecycle Models

Introduces waterfall, agile, and hybrid SDLC models and their control implications. Connects methodology choice to audit approach selection.

Lesson 3 • Configuration and Change Management

Teaches configuration baselines, change management workflows, and release controls. Links change management to audit procedures for system integrity.

Lesson 4 • Software Acquisition and Vendor Management

Covers make-vs.-buy decisions, vendor evaluation, and contract controls. Prepares learners to audit third-party software procurement.

Lesson 1 • Network and Communications Controls

Examines network architecture, segmentation, and transmission security controls. Links network controls to audit procedures for connectivity risk.

Lesson 2 • Disaster Recovery Planning and Testing

Explains DR plan components, alternate site options, and testing methodologies. Prepares learners to audit DR readiness and test result adequacy.

Lesson 3 • Data Center and Infrastructure Controls

Covers physical and environmental controls for data centres and server infrastructure. Prepares learners to audit facility and hardware security.

Lesson 4 • Business Continuity Planning

Covers BCP development, business impact analysis, and recovery strategy selection. Connects continuity planning to audit assessment of organisational resilience.

Lesson 1 • Logical Access Controls

Covers identity management, authentication mechanisms, and authorisation models. Prepares learners to audit user access provisioning and review processes.

Lesson 2 • Information Security Governance

Introduces security governance structures, policies, and programme management. Connects security governance to audit scope for IS assurance engagements.

Lesson 3 • Threat and Vulnerability Management

Covers threat intelligence, vulnerability scanning, and patch management processes. Connects threat management maturity to audit risk assessment.

Lesson 4 • Data Classification and Protection

Explains data classification schemes, labelling, and data loss prevention controls. Links data protection controls to audit procedures for sensitive information.

Lesson 1 • Blockchain and Distributed Ledger Audit

Introduces blockchain architecture, smart contracts, and immutability controls. Prepares learners to assess audit implications of distributed ledger systems.

Lesson 2 • Internet of Things Security and Audit

Covers Internet of Things (IoT) device management, firmware security, and network segmentation risks. Connects IoT proliferation to expanded IS audit scope.

Lesson 3 • Cloud Computing Audit Considerations

Covers cloud service and deployment models, shared responsibility, and audit challenges. Connects cloud risk to audit procedures for third-party environments.

Lesson 4 • Artificial Intelligence and Automation Risks

Examines artificial intelligence (AI) model governance, algorithmic bias, and robotic process automation controls. Links AI risk to audit procedures for automated decision-making.

Lesson 1 • Domain-Specific Practice Drills

Provides targeted practice sets for each of the five CISA domains. Identifies knowledge gaps through performance tracking by domain.

Lesson 2 • Weak Area Remediation Planning

Guides targeted review of low-scoring domains using diagnostic data. Connects remediation effort to measurable score improvement.

Lesson 3 • Question Analysis and Answer Strategies

Teaches deconstruction of CISA question stems, distractors, and best-answer selection. Connects analytical technique to improved practice test performance.

Lesson 4 • Full-Length Simulated Exams

Administers timed 150-question mock exams under realistic conditions. Builds stamina and benchmarks readiness against passing score thresholds.