CISA &
CISM

IS audit standards, guidelines, and codes of professional ethics. Planning and conducting audits in accordance with IS audit standards to assist the organisation with protecting and controlling information systems.

IT governance frameworks, strategic alignment, value delivery, risk management, resource management, and performance measurement in enterprise environments.

Business case development, project governance, system development lifecycle, readiness and business impact reviews, and post-implementation reviews.

IT service management, infrastructure, database management, business continuity planning, disaster recovery, and network and end-user computing environments.

Information asset security frameworks, privacy principles, physical and environmental controls, identity and access management, and network security controls.

Establishing and maintaining an information security governance framework, defining roles and responsibilities, and aligning security strategy with organisational goals.

Identifying, assessing, and managing information security risk to achieve business objectives. Risk treatment strategies, risk monitoring, and reporting to stakeholders.

Developing and maintaining an enterprise information security programme that implements the information security strategy and aligns with business processes.

Planning, establishing, and managing the capability to detect, investigate, respond to, and recover from information security incidents to minimise business impact.

Focused exam preparation sessions for both CISA and CISM. Timed mock exams, question analysis, weak area identification, and final revision strategy for exam day.