Cyber Security Audit Certificate

You do not need any prerequisites for this accelerated course. However, ISACA recommends that you have a basic understanding of cyber security concepts and previous experience within the industry.

• Understand Security Frameworks to Identify Best Practices
• Define threat and vulnerability management
• Assess threats with the help of vulnerability management tools
• Build and deploy secure authorization processes
• Explain all aspects of cybersecurity governance
• Distinguish between firewall and network security technologies
• Enhance asset, configuration, change and patch management practices
• Manage enterprise identity and information access
• Identify application security control
• Identify cyber and legal regulatory requirements to aid in compliance assessments
• Identify weaknesses in cloud strategies and controls
• Perform cybersecurity and third-party risk assessments
• Identify the benefits and risks of containerization

• Digital Asset Protection
• Lines of Defense
• Role of Audit
• Audit Objectives
• Audit Scope

• Cybersecurity Roles and Responsibilities
• Security Frameworks
• Security Organization Goals & Objectives
• Cybersecurity Policy and Standards
• Cyber and Legal/ Regulatory Requirements
• Information Asset Classification
• Cybersecurity Insurance
• Cybersecurity Risk Assessment
• Cybersecurity Awareness Training & Education
• Social Media – Risk and Control
• Third-Party Assessment
• Service Providers
• Supply Chain Risk Management
• Performance Measurement

• Concepts and Definitions
• Threat and Vulnerability Management
• Enterprise Identity and Access Management
• Configuration Management / Asset management
• Change Management
• Patch Management
• Network Security
• Build and Deploy/Secure Authorization Process for Information Technology
• Incident Management
• Client Endpoint Protection
• Application Security
• Data Backup and Recovery
• Security Compliance
• Cryptography

• Firewall and Network Security technologies
• Security Incident & Event Management (SIEM)
• Wireless Technology
• Cloud Computing
• Mobile Security
• Internet of Things (IoT)
• Virtualization Security
• Industrial Control Systems (ICS)