The Definition of CISA

Information systems auditing takes time and money.

CISA stands for Certified Information Systems Auditor. Conceived in 1967, the Information Systems Audit and Control Association (ISACA) began accrediting professionals in information systems technology, auditing and accounting. The strides in technological progress and the increasing need for high-tech security have opened the way for vigilance in the structure and auditing of informational databases.

ISACA

The development of an exam for a CISA would be the touchstone to assess and maintain the caliber of auditing professionals globally. Initiating formal testing in 1978, ISACA, which sponsors CISA training, has 86,000 members; and since its inception, over 70,000 auditors have become certified. ISACA has approximately 180 chapters in 75 countries. The CISA exam can be taken in English, Dutch, French, German, Italian, Korean, Hebrew and Chinese. ISACA also administers the CISM (Certified Information Security Manager), CGEIT (Certified in the Governance of Enterprise IT), and CRISC (Certified in Risk and Information Systems Control) certifications.

CISA Prerequisites

To prepare for the CISA exam, it is recommended that the prospective applicant have IT and accounting knowledge and certifications. These certifying exams may include those for a certified public accountant (CPA), CCNA (Cisco Certified Network Associate), ACCA (Association of Chartered Certified Accountants) or CCNP (Cisco Certified Network Professional). According to Rutgers University, CISA candidates should have at least one year experience in auditing, or a bachelor's or master's degree in IT (Information Technology) or IS (Information Security).

CISA Benefits

The CISA program is for information systems consultants, operations officers, chief operating officers, accountants and executive officers. Employers prefer CISA-qualified practitioners since cutting-edge expertise is expected from this demanding course of study. The reputation and growing regard for this designation have led to businesses and educational centers requiring and incorporating it into their job specifications and curricula. As of June 2010, according to Payscale, CISA-qualified practitioners earn from $60,000 to $100,000.

CISA Exams

Students can sit for the CISA examination in June or December. The structure of the CISA exam consists of 200 multiple choice questions and takes four hours to complete. The six-tiered sections focus on each component of information auditing, including: management, organization and planning; technical infrastructure, protection of information assets, disaster recovery and business continuity; business application system development; and business process evaluation and risk management. In order to pass, a candidate must score at least 450 on the exam.

CISA Training Schools

Taking the CISA examination requires preparation. Several schools, institutes and colleges offer a CISA program. The College of International Security Affairs, CISA Boot Camp Intense Training, the InfoSec Institute, e-learning, and several colleges, such as American River and Louisiana State University, offer CISA prep courses for students.

References

• ISACA: Certified Information Systems Auditor
• Payscale: Certified Information Systems Auditor Certification Salary
• IT Governance: CISA Certified Information Systems Auditor Training Course
• Rutgers University: Certified Information Systems Auditor (PDF)
• Strathmore University School of Accountancy: Overview of CISA

Resources

• BureauofLaborStatistics: Accountants and Auditors