CISA Cert Prep: 5 Information Asset Protection for IS Auditors

Prepare for the CISA exam. Study topics from domain five: asset protection.

Introduction

• Welcome

1. Introduction to Information Security

• Information security concepts
• Anatomy of a cyberattack
• Social engineering
• Information security domains

2. Security Controls

• Data security
• Access control models
• Single sign-on
• Centralized access control
• Network security: Firewalls
• Authentication protocols
• VPNs and tunneling
• Domain names system
• Cryptography overview: Part 1
• Cryptography overview: Part 2
• Cryptography: Hash algorithms and digital signatures
• Cryptography: Public key infrastructure and certificates
• PBX and VOIP security
• Secure protocols
• Wireless security
• Internet of Things and endpoint security
• Third-party vendor controls
• Physical and environmental security
• Security assessment and testing
• Evidence collection and forensics

3. Attacks and Countermeasures

• Cyberattacks and countermeasures

4. Attestation Audits

• Conducting service organization control (SOC) audits

Conclusion

• Next steps