文档介绍：CISA Exam Prep Objective Matrix
CISA Job Practice Area 1: IS Audit Process (Approximately 10% of Exam)
Task Page Knowledge Statement Page
Develop and implement a risk-based IS 32 Knowledge of ISACA IS Auditing Standards, 27
audit strategy for anization in Guidelines and Procedures and Code of
compliance with IS audit standards, Professional Ethics
guidelines and best practices.
Knowledge of IS auditing practices and 27
Plan specific audits to ensure that IT and 24 techniques
business systems are protected and controlled.
Knowledge of techniques to gather information 39
Conduct audits in accordance with IS audit 27 and preserve evidence (., observation,
standards, guidelines and best practices to inquiry, interview, CAATs, electronic media)
meet planned audit objectives.
Knowledge of the evidence life cycle (., 39
Communicate emerging issues, potential 50 the collection, protection, chain of custody)
risks, and audit results to key stakeholders.
Knowledge of control objectives and 36
Advise on the implementation of risk 39 controls related to IS (., CobiT)
management and control practices within the
organization, while maintaining independence. Knowledge of risk assessment in an audit 35
context
Knowledge of audit planning and 24
management techniques
Knowledge of reporting munication 39
techniques (., facilitation, negotiation,
conflict resolution)
Knowledge of control self-assessment (CSA) 50
Knowledge of continuous audit techniques 50
CISA Job Practice Area 2: IT Governance (Approximately 15% of Exam)
Task Page Knowledge Statement Page
Evaluate the effectiveness of IT governance 67 Knowledge of the purpose of IT strategies, 74
structure to ensure adequate board control policies, standards and procedures for an
over the decisions, directions, anization and the essential elements of each
performance of IT so that it supports the
organization’s strategies and objectives. Knowledge of IT governance frame