5 - Internal Audit vs External Audit Assurance Objectives and

مساعد Cyvitrix

أهلاً بك! اكتب سؤالك أو اختر اقتراحاً من الأسفل.

أسئلة مقترحة

واتساب البريد

أنا هنا لمساعدتك

Autoplay
Autocomplete

Previous Lesson Complete and Continue

دورة CISA بالعربية | مدقق نظم المعلومات المعتمد

CISA Domain 1 - September 2026

1 - CISA Course Orientation and How to Use This Training as an IS Auditor (11:47)
Download Study Notes
2 - Domain 1 Overview Planning and Conducting Information Systems Audit (13:40)
3 - Role of the Information Systems Auditor and Audit Mindset (11:10)
4 - Key Stakeholders Auditor Auditee and Audit Client Responsibilities (10:50)
5 - Internal Audit vs External Audit Assurance Objectives and Reporting Lines (12:53)
6 - Internal Audit Fundamentals for Information Systems Assurance (16:05)
7 - Audit Committee Oversight and the Audit Charter for IS Audits (10:20)
Domain 1 - Quiz 1
8 - Audit and Assurance Engagement Types Used in IS Auditing (14:27)
9 - Engagement Letters Scope Agreements and Reliance on Specialists (11:11)
10 - Professional Ethics and Conduct for Information Systems Auditors (9:20)
11 - IT Assurance Frameworks and Using the Work of Other Assurance Providers (11:17)
12 - Legal Regulatory and Contractual Requirements in IS Audit Planning (12:44)
13 - Using Standards and Frameworks as Audit Criteria for IS Audits (19:05)
Domain 1 - Quiz 2
14 - Audit Pre-Planning and Risk-Based Audit Planning for IS Engagements (14:31)
15 - Executing the IS Audit Testing Approach Fieldwork and Workpaper Practices (13:57)
16 - Audit Evidence in IS Audits Sufficiency Competence and Reliability (13:14)
17 - Assessing Control Design and Operating Effectiveness and Audit Risk Impact (11:47)
18 - Audit Reporting Findings Recommendations and Audit Documentation Standards (12:12)
19 - Risk-Based Auditing and End-to-End Audit Lifecycle (11:16)
20 - Audit Sampling in IS Audits Statistical and Non-Statistical Methods (12:14)
Domain 1 - Quiz 3
21 - Control Self-Assessment When and How Auditors Use CSA Results (11:05)
22 - Computer-Assisted Audit Techniques Planning and Performing CAATs (11:26)
23 - Continuous Auditing and Continuous Monitoring Audit Use Cases and Models (13:12)
Domain 1 - Quiz 4
24 - Information System Auditing in the era of AI (13:06)
25 - Auditing Business Intelligence and Analytics Environments (12:53)
26 - Agile Auditing - Auditing Agile Environments and Iterative Delivery Controls (10:31)
27 - Emerging Technology Audit Risks and Practical Audit Considerations (15:36)
Domain 1 - Quiz 5
28 - Domain 1 Reflection Audit Judgment Evidence Quality (11:11)

CISA Domain 2 - September 2026

29 - Domain 2 Overview Governance and Management (14:30)
30 - Enterprise Governance Foundations Relevant to IS Auditors (14:21)
31 - Information Security Governance Oversight Accountability and Assurance Focus (12:12)
32 - IT Governance and IT Management Audit Boundaries and Evaluation Approach (11:14)
33 - Auditing Governance Structures Decision Rights and Performance Oversight (12:27)
34 - Enterprise Architecture Audit Relevance and Governance Controls (12:44)
Domain 2 - Quiz 1
35 - Policies as Governance Instruments Auditability and Control Intent (12:12)
36 - Standards as Governance Instruments Audit Criteria and Evidence Mapping (11:48)
37 - Procedures and Guidelines Operationalizing Controls for Audit Testing (11:18)
38 - Policy Audit Case Examples Acceptable Use Physical Security and Clear Desk (12:49)
39 - Policy Audit Case Examples Internet Use Email Security and Remote Access (15:17)
40 - Quality Attributes of Policies Standards and Procedures for Audit Readiness (14:53)
Domain 2 - Quiz 2
41 - IT Risk Management Audit Perspective and Assurance Objectives (13:56)
42 - Risk Types for Audit Planning Inherent Risk Residual Risk and Control Risk (11:46)
43 - Risk Management Frameworks How Auditors Evaluate Implementation Quality (13:01)
44 - Risk Identification Methods Documentation and Audit Evidence (13:09)
45 - Risk Analysis Likelihood Impact and Control Assumptions for Audit Review (13:04)
46 - Risk Evaluation and Treatment Accept Avoid Mitigate Transfer and Audit Tests (13:52)
47 - Risk Reporting and Monitoring KRIs Governance Reporting and Audit Trails (13:16)
48 - Auditor Role in Risk Management Assurance Advisory and Independence (12:41)
Domain 2 - Quiz 3
49 - Security Controls Control Families Types and Audit Test Strategies (14:13)
50 - Control Objectives and Compensating Controls Evaluating Control Sufficiency (13:49)
51 - Defense in Depth Audit Implications for Layered Security (11:46)
52 - Control Selection and Implementation Governance Evidence and Audit Approach (10:36)
53 - Internal Control Frameworks Using Control Models to Structure Audit Work (12:06)
54 - Control Evaluation Design Effectiveness vs Operating Effectiveness in Practice (11:35)
Domain 2 - Quiz 4
55 - Personnel Governance and Human Resources Controls Audit Focus Areas (12:08)
56 - Segregation of Duties Conflicting Duties (10:24)
57 - Outsourcing and Third-Party Risk Audit Approach to Vendor Governance (15:02)
58 - Case Study Lessons for Auditors from the CrowdStrike Outage July 2024 (9:35)
59 - SOC Reports Using Service Organization Control Reports in IS Audit Work (12:20)
Domain 2 - Quiz 5
60 - Auditing IT Management Processes Financial Portfolio Capacity (11:25)
61 - IT Financial Management for Auditors CAPEX OPEX ROI and ROSI (13:11)
62 - Maturity and Capability Assessments Audit (10:47)
63 - IT Performance Management Balanced Scorecard Evidence and Audit Evaluation (13:01)
64 - Quality Management in IT Quality Assurance Quality Control (13:43)
Domain 2 - Quiz 6
65 - Domain 2 Reflection Governance Assurance and Risk Oversight Outcomes (12:41)

CISA Domain 3 - September 2026

67 - Auditing Technology Acquisition Governance Controls and Risk Considerations (11:13)
68 - Auditing Feasibility Studies and Business Cases for Technology Investments (12:31)
69 - Budget Requests and RFP Processes Procurement Controls for Auditors (12:17)
Domain 3 - Quiz 1
70 - Projects and Programs Governance Structures and Audit Criteria (12:56)
71 - Project Planning Controls Scope Objectives and Work Breakdown Evidence (12:31)
72 - Schedule and Status Controls Monitoring Reporting and Audit Trail Review (12:59)
73 - Cost Estimation Controls Audit Review of Assumptions Models and Variances (12:29)
74 - Project Closure and Post-Implementation Review Auditor Expectations (12:29)
Domain 3 - Quiz 2
75 - Programming Fundamentals for Auditors What to Know to Audit Applications (13:15)
76 - Auditing System Development Life Cycle Models and Delivery Methods (13:30)
77 - Requirements Controls SRTM Traceability Use Cases and Abuse Cases (13:53)
78 - Application Types and Architecture Context for Audit Planning (12:53)
79 - Software Licensing Compliance Audit Approach to Legal and Contract Risks (13:19)
80 - Re-Engineering and Reverse Engineering Audit Risks and Control Expectations (11:09)
81 - Application Controls Input Processing Output and Interface Control Testing (13:53)
Domain 3 - Quiz 3
82 - Auditing Testing Practices Test Strategy Evidence and Defect Governance (14:32)
83 - Certification and Accreditation Audit Use of Assurance Results and Evidence (11:54)
84 - Release and Deployment Management Audit Controls and Evidence (12:23)
85 - Implementation and Changeover Cutover Risks and Audit Verification Steps (13:42)
86 - Maintenance and Support Controls Audit Focus on Stability and Integrity (10:39)
87 - Auditing Software Projects End-to-End Controls and Practical Testing Plan (11:27)
Domain 3 - Quiz 4
88 - Change Management Audit Criteria Approval Controls and Traceability (12:38)
89 - Configuration Management Baselines CMDB Evidence and Audit Testing (11:44)
90 - Version Control Systems Audit Evidence for Integrity and Segregation (10:56)
91 - Patch and Vulnerability Management Audit Approach to Timeliness and Coverage (13:17)
Domain 3 - Quiz 5
92 - Auditing Virtualization Environments Control Risks and Assurance Tests (13:33)
93 - Auditing Cloud Services Shared Responsibility and Control Assurance (14:36)
94 - Cloud Deployment Models Audit Considerations for Public Private and Hybrid (11:58)
Domain 3 - Quiz 6
95 - Domain 3 Reflection Delivery Governance and Control Assurance Quality (11:45)

CISA Domain 4 - September 2026

96 - Domain 4 Overview Information Systems Operations and Business Resilience (15:07)
97 - Auditing IT Operations Management Governance Processes and Metrics (14:06)
98 - IT Asset Management Audits Lifecycle Controls and Evidence Requirements (11:11)
99 - End-User Computing and Shadow IT Audit Risks and Detection Techniques (8:45)
100 - Job Scheduling and RPA Auditing Automated Operations and Bot Controls (10:59)
Domain 4 - Quiz 1
101 - Auditing Application Architecture Control Points and Assurance Objectives (14:06)
102 - Auditing Network and Security Architecture Segmentation (12:12)
103 - IT Infrastructure Components for Auditors What to Evaluate and Why (12:23)
104 - Enterprise Computing Operations Audit View of Platforms and Service Delivery (13:51)
105 - Preventive Maintenance and Operational Security Audit Evidence and Testing (12:04)
Domain 4 - Quiz 2
106 - Incident Management Audits Detection Triage and Closure Controls (12:38)
107 - Incident Response Plans Audit Readiness Testing and Execution Evidence (12:49)
108 - Digital Forensics Evidence Handling Chain of Custody and Audit Considerations (11:12)
Domain 4 - Quiz 3
109 - Security Operations Centers Auditing Monitoring Capabilities and Coverage (12:18)
110 - Operational Logging Audit Requirements for Log Generation and Retention (12:42)
111 - Audit Trails and SIEM Evaluating Use Cases Integrity and Alert Governance (12:19)
112 - File Integrity Monitoring Audit Use and Control Effectiveness Review (11:36)
113 - EDR NDR XDR and SOAR Auditing Detection and Response Tooling (12:24)
Domain 4 - Quiz 4
114 - Database Fundamentals for Auditors Data Structures and Control Touchpoints (11:37)
115 - Keys and Integrity Auditing Referential Integrity and Data Quality Controls (12:07)
116 - Database Security Controls Access Hardening and Activity Monitoring Audits (15:34)
117 - Database Resilience Backup Recovery and High Availability Audit Tests (11:03)
Domain 4 - Quiz 5
118 - Networking Fundamentals for IS Auditors Control Relevance and Risk (17:41)
119 - OSI and TCPIP Models for Auditors Mapping Controls to Network Layers (19:15)
120 - Auditing Physical Layer Controls Facilities Cabling and Environmental Factors (20:47)
121 - Auditing Data Link Controls VLANs Switching and Layer Two Security (13:35)
122 - Auditing Network Layer Controls Routing Segmentation and Layer Three Risks (16:10)
123 - Auditing Layers Four Through Seven Services Applications and Protocol Risks (17:50)
Domain 4 - Quiz 6
124 - Disaster Recovery Planning Audits Governance Testing and Capability Evidence (12:26)
125 - Business Continuity Audits Business Impact Strategy and Operational Readiness (13:35)
126 - Recovery Metrics RPO RTO AIW SDO and MTO in Audit Evaluations (15:02)
127 - Recovery Strategies Alternate Sites Processing Options and Audit Evidence (12:48)
128 - BCP and DRP Testing Audit Evaluation of Exercising and Remediation Tracking (12:24)
129 - Business Continuity Policy Audits Scope Ownership and Compliance Evidence (13:25)
Domain 4 - Quiz 7
130 - Backup Controls Auditing Backup Design Execution and Restoration Testing (12:28)
131 - Server and Application Security with Backup Policy Audit Verification Approach (14:34)
132 - Storage Technologies for Auditors Risks Controls and Assurance Tests (14:05)
Domain 4 - Quiz 8
133 - Auditing Redundant Array of Independent Disks Resilience Design and Monitoring (14:50)
134 - Domain 4 Reflection Operational Reliability and Resilience Assurance (13:27)

CISA Domain 5 - September 2026

135 - Domain 5 Overview Protection of Information Assets (11:59)
136 - Information Security Objectives Confidentiality Integrity and Availability (12:49)
137 - Core Security Terminology for IS Audits Aligning Language to Audit Criteria (11:04)
138 - Vulnerability Concepts Audit Relevance and Control Assurance Approach (10:30)
Domain 5 - Quiz 1
139 - Malware Risks Auditing Prevention Detection and Response Controls (13:30)
140 - Denial of Service Risks Auditing Availability Controls and Capacity Measures (13:20)
141 - Man-in-the-Middle Risks Auditing Network Trust and Encryption Controls (11:47)
142 - Attack Lifecycle Models Using Kill Chain Concepts for Control Validation (11:29)
Domain 5 - Quiz 2
143 - IAM Governance Auditing Identity Lifecycle and Access Control Management (13:28)
144 - Authentication Authorization and Accountability Audit Criteria and Evidence (13:51)
145 - Multi-Factor Authentication and Biometrics Audit Testing and Exception Review (13:39)
146 - Single Sign-On and Reduced Sign-On Auditing Federation and Access Flows (12:20)
147 - Active Directory and LDAP Auditing Directory Services and Privileged Access (14:41)
148 - Account and Password Policies Auditing Access Governance and Compliance (14:03)
Domain 5 - Quiz 3
149 - Network Segmentation Auditing Trust Boundaries (12:29)
150 - Firewalls Auditing Rule Governance Logging and Change Control (13:01)
151 - DMZ Bastion Hosts and Honeypots Auditing (12:33)
152 - IDS and IPS Auditing Detection Coverage and Tuning Governance (11:29)
153 - Network Security Operations Auditing Configuration Monitoring and Hygiene (12:34)
154 - Network Redundancy Auditing High Availability and Failover Controls (12:14)
155 - Network Access and BYOD Policies Auditing Endpoint Admission and Compliance (13:44)
Domain 5 - Quiz 4
156 - Physical Security Controls Auditing Access Surveillance and Visitor Management (13:28)
157 - Environmental Controls Auditing Power HVAC Fire and Facility Protections (15:08)
Domain 5 - Quiz 5
158 - Data Lifecycle Management Auditing Controls from Creation to Disposal (10:55)
159 - Data Classification Auditing Classification Schemes and Handling Requirements (13:32)
160 - Data Destruction Auditing Media Sanitization and Disposal Evidence (11:08)
161 - Data Protection Policies Auditing Handling Rules and Enforcement Controls (13:42)
162 - Asset Ownership and Custodianship Auditing Accountability for Data Protection (11:01)
Domain 5 - Quiz 6
164 - Symmetric Encryption Auditing Key Handling and Implementation Controls (11:25)
165 - Asymmetric Encryption Auditing Key Management and Trust Models (17:16)
166 - Digital Certificates Auditing Issuance Use and Validity Controls (11:24)
Domain 5 - Quiz 7
167 - Public Key Infrastructure Auditing Certificate Lifecycle Governance (11:20)
168 - Hashing and Salting Auditing Integrity Controls and Credential Protection (13:02)
169 - Digital Signatures Auditing Nonrepudiation and Integrity Assurance (10:51)
170 - Certificate Pinning Audit Considerations and Operational Risks (10:54)
171 - Transport Security Auditing Secure Sockets Layer TLS and Mutual TLS Usage (11:28)
172 - Cryptography Use Cases Auditing Data in Transit at Rest and in Use Controls (11:51)
Domain 5 - Quiz 8
173 - Endpoint Security Auditing Baselines Hardening and Monitoring Controls (10:55)
174 - Endpoint Security Tools Auditing Capabilities Coverage and Alert Governance (16:11)
175 - Social Engineering Auditing Human Risk and Control Effectiveness (14:09)
176 - Security Awareness Programs Auditing (10:31)
Domain 5 - Quiz 9
177 - Operational Technology and ICS Auditing Unique Asset Protection Controls (14:14)
178 - Data Governance Auditing Stewardship Quality and Control Ownership (10:21)
179 - Data Governance Tooling Auditing Classification Cataloging and DLP Enablement (10:29)
180 - Privacy Controls Auditing Data Protection Consent and Regulatory Alignment (14:04)
Domain 5 - Quiz 10
181 - Domain 5 Reflection Asset Protection Assurance and Control Effectiveness (14:08)

Practice Exams Access

CISA Exams - Easy/Mid-Level - 2800 Questions
CISA Exams - Mid/Hard-Level - 1700 Questions

5 - Internal Audit vs External Audit Assurance Objectives and Reporting Lines

Complete and Continue

Lesson Content Locked

Your session expired. Please sign in again to continue.

Login