ISACA offers certifications for anyone interested in IT governance, risk assessment, techniques auditing and security administration. It is now administered by ISACA to “replicate” the wide range of IT governance professionals it serves. ISACA was founded in 1967 by a group who were interested in centralized information and steering regarding laptop system auditing. ISACA currently has over 200 chapters in more than 85 countries, and over 125,000 members. ISACA also boasts over 15,000 non-members with ISACA credentials. ISACA also offers skilled certifications (the main topic of this text), publishes ISACA Journal, and hosts conferences around the world.
Overview of the ISACA Certification Program
ISACA offers four professional certifications that are geared towards data program auditors and managers.
Certified Information Systems Auditor (CISA).
Certified Information Security Manager (CISM).
CGEIT (Certified in Governance of Enterprise IT)
CRISC (Certified in Risk and Information Systems Control)
ISACA requires that candidates take a written exam for each certification. Exams are only provided three times a year. Additionally, you must adhere to the ISACA Code of Skilled Ethics. You must also agree to comply with continuing with skilled training requirements.
CISA Certification
If you are a data techniques auditor with expertise and want to move up or over, consider purchasing the Certified Information Systems Auditor certification (CISA). The CISA credential recognizes individuals who are experts in auditing, controlling, and ensuring business IT programs. With over 115,000 certificates granted since the program began, the CISA certification is the most popular ISACA certification.
ISACA will introduce new job practice areas starting with the June 2016 CISA exam. It will include 5 domains.
Information Systems Auditing Process
Governance and management of IT
Information Systems Acquisition, Development and Implementation
Information Systems Operations and Business Resilience
Information Assets Protection
Candidates must pass a 150-question exam, show proof of labor expertise (minimum 5 years of experience in info programs auditing or safety management), and complete the appliance to be eligible for CISA certification.
ISACA allows you to substitute schooling with some work experience. A four-year or two-year diploma can count towards one or two years of labor expertise, respectively.
CISM Licensed Certification
The Certified Information Security Manager certification (CISM), is one of the primary credentials required for data safety administration. There are over 27,000 certificates awarded. The CISM credential recognizes those who manage, design, and develop enterprise info security. With the CISM credential and the best knowledge, you may be considered for senior info safety supervisor, chief cybersecurity officer (CSO), security guide, or coach.
The examination will focus on info security governance, compliance, data danger management and compliance, info incident administration, knowledge safety program improvement, and administration.
Candidates must pass a 200-question exam to obtain CISM certification. They also need to present proof of labor competence (minimum 5 years of professional-level info security; three years must be as a supervisor in at least three job areas) and complete the application. The applicant must have at least five years’ experience in the area of CISM or within 10 years prior to applying.
The exam covers four areas of job application:
Information Security Governance (24%)
Information Risk Management (30 %)
Information Security Program Development and Management (27%)
Information Security Incident Management (19%)
If you are unsure about the data safety work expertise requirement, a current CISA, Certified Info Methods Security Skilled, (CISSP), or postgraduate diploma can substitute for 2 years of experience. One year of experience is required for the SANS World Info Assurance Certification, CompTIA Safety+ and Microsoft Certified Techniques Engineers (MCSE), Catastrophe Restoration Institute Licensed Business Continuity Skilleds (CBCP), or ESL IT Safety Supervisor credentials. You can also substitute.
CRISC Certification
More than 18,000 people have earned the Certified in Risk and Information Systems Control credential (CRISC). This credential identifies IT professionals responsible for implementing enterprise-wide information threat management applications. CRISC certification is required by many organizations for certain positions, such as safety operations heart analyst, security, and secur.