Why be a CISA®
The standard test of a profession is the way it extends the boundaries of knowledge and understanding in its area of expertise and also the value and recognition it bestows on the individual who achieves it. Since 1978, the Certified Information Systems Auditor (CISA) program, sponsored by the Information Systems Audit and Control Association (ISACA), has been the globally accepted standard of achievement among information systems (IS) audit, control and security professionals.
Possessing the CISA designation demonstrates proficiency and is the yardstick of success achievement in the profession. With the growing demand for professionals possessing Information Systems audit, control and security skills, CISA has become the certification program preferred by individuals and organizations around the world. CISA certification signifies a commitment of excellence to the IS audit, control and security industry. In addition, it offers a number of professional and personal benefits.
The CISA program is designed for IS consultants, IS security and control professionals, Chief Informations Officers(CIOs), Chief Financial Officers(CFOs), Chief Operations Officer(COOs), Chief Executive Officers(CEOs), Accountants and a range of IT practitioners.
It is the breadth of the career opportunities open to certified information systems auditors that makes the profession the choice of so many young professionals seeking career advancement.
Earning the CISA designation helps assure an outstanding reputation, as a qualified is audit, control and/or security professional. Whether you wish to enhance your on-the-job performance or secure a promotion or new position, becoming a CISA will distinguish you from other candidates and provide a competitive advantage.
Because the CISA program certifies individuals who demonstrate proficiency in todays most sought-after skills, employers prefer to hire and retain those who achieve and maintain their designation. The CISA designation assures employers that their staff has met the current educational and experience criteria necessary for successful on-the-job performance.
Although certification may not be mandatory immediately, a growing number of organizations are recommending that employees become certified.
To help ensure success in the global marketplace, it is vital to select a certification program based on universally accepted technical practices. CISA delivers such a program. CISA is recognized worldwide, by all industries, as the preferred designation for IS audit, control and security professionals.
Student Registration
Though CISA is sponsored by ISACA, one need not register with ISACA to be able to pay for CISA examinations. But you can enjoy substantial cost savings on exam fees and study materials by joining ISACA. Registration forms can be downloaded from the ISACA website www.isaca.org.
Registration Requirements
- Relevant work experience (Students will have to provide documentary evidence of at least 6 months work experience )
- Certifications acquired (both and professional and academic). Admissible certifications include but not limited to CPA, ACCA, CIA, MCSE, MCSD, CCNA, CCNP, CCNE, BBIT,BCOM, Bsc., LLB, LLM, MBA, Msc, phD etc
A Guide to Examinations and Assessment
CISA Examination questions are carefully developed and maintained to ensure they accurately test an individual’s proficiency in IS audit, control and security practices. A scaled correct score of 75 is required to pass the examination. Because the CISA designation is recognized around the world, the exam is offered in the following languages: Dutch, English, French, German, Hebrew, Italian, Japanese, Korean, Traditional Mandarin Chinese, Simplified Mandarin Chinese and Spanish .
The CISA® Examinations
The CISA Examination is offered each year in June and consists of 200 multiple-choice questions, administered during a four-hour session. The purpose of the examination is to test a candidate’s knowledge, evaluation and application of IS audit principles and practices and technical content areas. These areas and their definitions are as follows:
Process-based Area
- The IS Audit Process – Conduct IS audits in accordance with generally accepted IS audit standards and guidelines to ensure that the organization’s information technology and business systems are adequately controlled, monitored and assessed .
Content Areas
- Management, Planning and Organization of IS – Evaluate the strategy, policies, standards, procedures and related practices for the management, planning and organization of IS.
- Technical Infrastructure and Operational Practices – Evaluate the effectiveness and efficiency of the organization’s implementation and ongoing management of technical operational infrastructure to ensure that they adequately support the organization’s business objectives.
- Protection of Information Assets - Evaluate the logical, environmental and IT infrastructure security to ensure that it satisfies the organization’s business requirements for safeguarding information assets against unauthorized use, disclosure, modification, damage or loss.
- Disaster Recovery and Business Continuity – Evaluate the process for developing and maintaining documented, communicated and tested plans for continuity of business operations and IS processing in the event of a disruption.
- Business Application System Development, Acquisition, Implementation and Maintenance - Evaluate the methodology and processes by which the business application system development, acquisition, implementation and maintenance are undertaken to ensure that they meet the organization’s business objectives.
- Business Process Evaluation and Risk Management – Evaluate business systems and processes to ensure that risks are managed in accordance with the organization’s business objectives.
Correspondence regarding registration should be addressed to:
Information Systems Audit and Control Association
135 S. LaSalle, Dept
1055, Chicago, Illinois 60674 – 1055
USA
Tel: +1. 847. 253. 1545
Fax: +1. 847. 253. 1443
Email: info@isaca.org
Website www.isaca.org
Becoming a CISA®
The CISA program is designed to access and certify individuals in the IS audit, control and security profession who demonstrate exceptional skill and judgment. To earn the CISA designation, candidates are required to:
1)Successfully complete the CISA Examination
2) Adhere to the Information Systems Audit and Control Association’s Code of Professional Ethics, which is included in the Candidate’s Guide to the CISA Examination and provided to each registered exam candidate .
3) Submit evidence of a minimum of five years of professional IS auditing, control or security work experience. Substitution and waivers of such experience may be obtained as follows fees .
a) A maximum of one year of IS audit, control or security experience may be substituted for:
i) One full year of audit experience, or
ii) One full year of information systems experience, and/or ,
iii) An associate’s degree (60 semester University credits or its equivalent)
b) Two years IS audit, control or security experience may be substituted for a bachelor’s degree (120 semester University credits or its equivalent)
c) One year of IS audit, control or security experience may be substituted for each two years of experience as a full-time university instructor in a related field (i.e. computer science, accounting, IS auditing). No maximum limitation applies (i.e. six years of university instructor experience is equal to three years of IS auditing, control or security experience)
Experience must be gained within the 10 year period preceding the Application for the certification or within five years from the date of initially passing the examination. Application for certification must be submitted within five years from the passing date of the CISA exam. All experience will be verified independently with employers.
It is important to note that many individuals choose to take the CISA exam prior to meeting the experience requirements. This practice is acceptable and encouraged, although the CISA designation will not be awarded until all requirements are met.
Questions to ISACA can also be directed to the CISA certification department using the following contacts :
Phone: 1.847.253.1545 ext 471 or 474
Fax; 1. 847. 253. 1443
Email; certication@isaca.org
Website; www.isaca.org
Course Structure
Classes are scheduled for the two yearly exam sittings.
December administration, intake in July
June administration, intake in January
Time :
Weekdays – 5.30 pm to 7.30 pm
Saturdays – 8.30 am to 1.00 pm
Registration
To register, bring the following items:
- Original and photocopies of professional and academic certificates
- Three passport size photos
- Registration fee
Institute Fees
* Students must provide verification of full-time status along with their registration form.
Register Online (ISACA members only) and save on the registration fee
Online registration via the ISACA web site. www.isaca.org/examreg, is encouraged. By doing so candidates will save US$35.
| ISACA Members |
US$ 335 |
US$ 385 |
| Non-Members |
US$ 455 |
US$ 505 |
NOTE: Payment must accompany the registration form.
Library
Open Mon-Fri 7:30am-9:00pm & Sat 8:00am-7:30pm.
Students are encouraged to make use of CISA texts, CISA revision material, and other texts available in the library.
University Library | 
