DoTrust

Official ISACA CISA Online Training (in Arabic)

18% DOMAIN 1 – INFORMATION SYSTEMS AUDITING PROCESS

1. IS Audit Standards, Guidelines, and Codes of Ethics
2. Types of Audits, Assessments, and Reviews
3. Risk-Based Audit Planning
4. Types of Controls and Considerations

1. Audit Project Management
2. Audit Testing and Sampling Methodology
3. Audit Evidence Collection Techniques
4. Audit Data Analytics
5. Reporting and Communication Techniques
6. Quality Assurance and Improvement of Audit Process

18% DOMAIN 2 – GOVERNANCE & MANAGEMENT OF IT

1. Laws, Regulations, and Industry Standards
2. Organizational Structure, IT Governance, and IT Strategy
3. IT Policies, Standards, Procedures and Practices
4. Enterprise Architecture and Considerations
5. Enterprise Risk Management 
6. Privacy Program and Principles
7. Data Governance and Classification

B–IT MANAGEMENT

1. IT Resource Management
2. IT Vendor Management 
3. IT Performance Monitoring and Reporting
4. Quality Assurance and Quality Management of IT

12% DOMAIN 3 – INFORMATION SYSTEMS ACQUISITION, DEVELOPMENT & IMPLEMENTATION

1. Project Governance and Management
2. Business Case and Feasibility Analysis
3. System Development Methodologies
4. Control Identification and Design

1. System Readiness and Implementation Testing
2. Implementation Configuration and Release Management
3. System Migration, Infrastructure Deployment, and Data Conversion
4. Post-implementation Review

26% DOMAIN 4 – INFORMATION SYSTEMS OPERATIONS & BUSINESS RESILIENCE

1. IT Components
2. IT Asset Management
3. Job Scheduling and Production Process Automation
4. System Interfaces
5. Shadow IT and End-User Computing
6. Systems Availability and Capacity Management
7. Problem and Incident Management
8. IT Change, Configuration, and Patch Management
9. Operational Log Management
10. IT Service Level Management
11. Database Management

1. Business Impact Analysis
2. System and Operational Resilience
3. Data Backup, Storage, and Restoration
4. Business Continuity Plan
5. Disaster Recovery Plans

26% DOMAIN 5 – PROTECTION OF INFORMATION ASSETS

1. Information Asset Security Frameworks, Standards, and Guidelines
2. Physical and Environmental Controls
3. Identity and Access Management
4. Network and End-Point Security
5. Data Loss Prevention
6. Data Encryption
7. Public Key Infrastructure
8. Cloud and Virtualized Environments
9. Mobile, Wireless, and Internet-of-Things Devices

1. Security Awareness Training and Programs
2. Information System Attack Methods and Techniques
3. Security Testing Tools and Techniques
4. Security Monitoring Tools and Techniques
5. Security Incident Response Management
6. Evidence Collection and Forensics