CISA Exam Cram 2 : Certified Information Systems Auditor
Books Details :Author : Allen Keele, Keith Mortier
Paperback: 456 pages
Publisher: Que; Bk&CD-Rom edition (April 20, 2005)
Language: English
ISBN: 0789732726
Product Dimensions: 9.1 x 6.0 x 1.1 inches
Book Description
Want an affordable yet innovative approach to studying for the Certified Information Systems Auditor (CISA) 2005 exam? CISA 2005 Exam Cram 2 is your solution. You will have the essential material for passing the CISA 2005 exam right at your fingertips. All exam objectives are covered and you'll find practice exams, exam alerts, notes, tips and cautions to help guide you through your exam preparation. A CD also provides you with a video introduction to the exam and complete explanations of answers to the practice questions from Certified Tech Trainers (CTT). As a special bonus, you will receive $75 in discounts on CTT products and services. For your smartest, most efficient way to get certified, choose CISA 2005 Exam Cram 2.
About the Author
Allen Keele has 20 certifications, the CISA, CISM, CISSP, and Security+ among them. As president and program developer for Certified Tech Trainers, he has over 14 years experience in information security and risk management. He has authored books on security and lectures at leading companies such as Deloitte and Touche, Blue Cross-Blue Shield, and Fujitsu.
Keith Mortier holds a CISA and CISSP certification and a BS in Computer Information Systems. Within the IT industry, Keith has designed and implemented risk assessment, vulnerability testing and disaster recovery-security plans. Keith is president of LMI solutions providing security services to both commercial and government clients.
Introduction
Welcome to Information Systems Audit and Controls Association's Certified Information Systems Auditor (CISA) Exam Cram 2! Whether this is your first or your fifteenth Exam Cram 2 series book, you will find information here that will help ensure your success as you pursue knowledge, experience, and certification. This introduction explains ISACA certification programs in general and talks about how the Exam Cram 2 series can help you prepare for the CISA exam. This chapter discusses the basics of ISACA certification exams, including a description of the testing environment and a discussion of test-taking strategies. Chapters 1 through 7 are designed to remind you of everything you need to know to take—and pass—the CISA certification exam. The two sample tests at the end of the book should give you a reasonably accurate assessment of your knowledge—and, yes, we've provided the answers and their explanations to the tests. Read the book and understand the material, and you'll stand a very good chance of passing the test.
Exam Cram 2 books help you understand and appreciate the subjects and materials you need to pass ISACA certification exams. Exam Cram 2 books are aimed strictly at test preparation and review. They do not teach you everything you need to know about a topic. Instead, we present and dissect the questions and problems we've found that you're likely to encounter on a test. We've worked to bring together as much information as possible about ISACA certification exams.
Nevertheless, to completely prepare yourself for any ISACA test, we recommend that you begin by taking the Self-Assessment that is included in this book, immediately following this introduction. The Self-Assessment will help you evaluate your knowledge base against the requirements for an ISACA Certified Information Systems Auditor under both ideal and real circumstances.
Based on what you learn from the Self-Assessment, you might decide to begin your studies with some classroom training, some practice with systems auditing, or some background reading. On the other hand, you might decide to read one of the many study guides available from ISACA or third-party vendors on certain topics, including the award-winning certification preparation series from Que Publishing. We also recommend that you supplement your study program with visits to http://www.examcram2.com to receive additional practice questions, get advice, and track the CISA program.
About the CISA Exam and Content Areas
The Information Systems Audit and Control Association (ISACA) developed the Certified Information Systems Auditor (CISA) program in 1978 to accomplish these goals:
Develop and maintain a testing instrument that could be used to evaluate an individual's competency in conducting information systems audits
Provide a mechanism for motivating information systems auditors to maintain their competencies and monitoring the success of the maintenance programs
Aid top management in developing a sound information systems audit function by providing criteria for personnel selection and development
The CISA program is designed to assess and certify individuals in the IS audit, control, or security profession who demonstrate exceptional skill, judgment and proficiency in IS audit, control, and security practices.
More than 35,000 professionals have earned the CISA certification since inception, and the certification is widely respected as a premier information security and information systems auditing accreditation. The certification continues to grow in acceptance and employer desirability; more than 15,000 candidates are expected to register for the 2005 exam (15% growth from 2004).
The CISA exam is offered only once per year, in early June; the exam for 2005 is offered on June 11. You may register as early as February 2, 2005, and the registration deadline is March 30, 2005. You should note that this exam is not computerized and is not provided through conventional testing centers such as Prometric or Vue. You may register online at http://www.isaca.org or take the exam at any ISACA chapter location. The current published exam registration fee is $385 for members and $505 for nonmembers. The best place to learn more about the CISA certification and the CISA exam is http://www.isaca.org.
The Information Systems Audit and Control Association states that the tasks and knowledge required of today's and tomorrow's information systems audit professional serve as the blueprint for the CISA examination. These areas are defined through a Practice Analysis that is conducted at regular intervals and consists of both process and content components in a CISA's job function. Accordingly, exams consist of tasks that are routinely performed by a CISA and the required knowledge to perform these tasks.
How valuable is the CISA certification to employers and individuals? Sometimes the best measure of a certification's value is reflected by how certification holders feel about the certification after having achieved it. In 2001, ISACA surveyed its membership to obtain feedback from CISA certified professionals as to whether obtaining the certification had advanced their careers. Seventy-one percent of members holding the CISA certification affirmed the value of the certification toward career advancement, and 75% of all members, certified and noncertified alike, felt that the CISA certification would be valuable for career advancement in the future.
Another measure of a certification's value can be found by assessing the desirability of the certification to employers. How many employers desire the certification as an employment prerequisite? Looking to popular job boards on the Internet such as Monster.com, TotalJobs.com, and Workthing.com, we can see that the quantity and quality of jobs requiring CISA certification are growing every month.
What is driving the employer demand for the CISA certification? Companies are under growing pressure to improve, document, and test their methods for managing information. As the late Dr. W. E. Deming (1900–1993) was able to prove, the quest for quality of processes and product is achieved through careful measurement of what exists, thorough analysis of defects, and effective remediation and correction. The quest for quality is just that: a quest. This means that quality improvement is an ongoing process that requires continuous reassessment. Assessing the capability of information systems to support business goals while maintaining information confidentiality, integrity, and reliability is exactly what a Certified Information Systems Auditor (CISA) does well.
It is easy enough to create and implement a technology for processing information, which is what the majority of individuals within the information technology (IT) industry are tasked with. However, using IT to facilitate communication and information management is only half the story. Today we need to make sure that IT not only does what it is supposed to do, but also that it will not do what it is not supposed to do. For example, we have created systems to facilitate online commerce and transaction processing. Will those same systems ensure that no transactional errors occur? Will those systems resist accidental or purposeful and malicious modification of data? Do the systems protect the information confidentiality well enough to comply with new privacy laws and standards? We cannot know the answers to these questions unless we have professionally reviewed, measured, and tested the systems. Again, this is what a CISA does.
Spotlight Reviews :
Reviewer: H. Lam (USA)
Per the authors' intent, CISA Exam Cram 2 is not meant to be a comprehensive preparation for the Certified Information Systems Auditor exam, but a summary of its important elements. As such, this book does a fair job, and I would recommend the book as a cursory appraisal of one's knowledge to identify areas for further study.
There are some idiosyncrasies in the book, such as:
- "4GL languages are inappropriate for designing any intensive data-calculation procedures" (Page 259);
but the book appears to be reflective of ISACA test policy. The authors and the publishing company were responsive to my questions about content in the book.
CISA Exam Cram 2 also includes a set of practice multiple-choice questions on CD-ROM. Registration of the book online entitles one to a bonus set of questions. As the book is not comprehensive, neither are the practice questions - in that they mirror the material in the book, and in that they require less analytical reasoning than typical of the actual exam. The answers do not explain why a particular choice is right compared to other choices, and why other choices are wrong. Nonetheless, the practice questions are a good value, considering their price and that the actual exam may also ask basic questions.
One should look to other resources for in-depth preparation (one can ask for recommendations in the various Yahoo and Google Groups dedicated to the CISA exam), but CISA Exam Cram 2 deserves to be considered as an introductory part of a rigorous curriculum in preparation for ISACA's Certified Information Systems Auditor exam. It is probably best to use this book before December 2005. ISACA has stated that the 2006 exams will cover new practice areas
Reviewer: Gary Waltrip (Hollister, CA USA)
I am a non-IT professional, a Certified Public Accountant, so passing the CISA exam appeared a daunting task. I read the CISA Review Manual carefully, underlining key passages and points. I knew it wasn't good enough, as I was missing too many of the CISA practice questions purchased from ISACA. So I found this book on Amazon and bought it a month before the exam, and read it all.
I found Exam Cram 2 more condensed than the CISA Manual and more readable as well. If you've cut it too close and find the exam looming before you with planned reading still not done, this book could save you. It solidified my understanding of several key areas. The book was a valuable tool for my exam efforts, and I passed on my first try in December 2005 with a score of 83.
You need to read more than one book on the CISA examination areas to round out your understanding. That, taking practice exams and researching those questions you don't fully understand, will probably get you over the hump. It worked for me.
Reviewer: Jean-francois Drouin (Vermont, USA)
I gave this book 5 stars because it's concise, well-written and reasonably complete. ISACA's exams are a b**ch because nobody really knows what stuff will be covered and what will not. Personally, I used this book as my first study material. I read that thing twice before switching to the official CRM 2005 which is longer and more detailed. There's not a whole lot of CISA books beside the official CRM, Kramer's misaligned Prep Guide and this Exam Cram. During my readings, I found a couple of errors and sent an email to the author about it. He replied himself and told me that they would be corrected in the 2nd edition which is due for April 2006.
To wrap things up, it's an excellent book with some small mistakes. It's concise and focused but it should not be your sole source of material. The Exam Cram + a thorough study of the official CRM is probably your best bet. Another big + : this book is as cheap as it gets in terms of certification books. Don't be fooled by it's cheapness, it really offers an incredible value.
That being said, as of today, I would suggest buyers wait for the 2nd edition which is due soon.
posted by IT e-Books @ 11:06 PM
0 Comments:
Post a Comment
<< Home