The 5 CISA Domains Explained

The 5 CISA Domains Explained

The CISA® (Certified Information Systems Auditor®) credential, awarded by ISACA®, is the gold standard for IT audit, control and assurance professionals. Since its introduction in 1978, it has been one of the most sought-after qualifications for audit, risk and compliance leadership positions. CISA covers five domains, updated in August 2024 to reflect changes in technology, risk management and governance frameworks. Regular domain updates ensure the exam stays aligned with real-world job roles and emerging industry trends. What are the 5 CISA domains? CISA domain Exam weighting 1. Information Systems Auditing Process 18% 2. Governance & Management of IT 18% 3.
The post The 5 CISA Domains Explained appeared first on IT Governance Blog.

Read More
7 Steps to a Successful ISO 27001 Risk Assessment – Updated for 2025

7 Steps to a Successful ISO 27001 Risk Assessment – Updated for 2025

Risk assessments remain central to ISO 27001 compliance in 2025, ensuring your ISMS (information security management system) is robust and effective. ISO 27001:2022 and ISO 27002:2022 introduced several updates that organisations should incorporate into their risk assessment processes. Here are the seven essential steps for conducting a successful ISO 27001 risk assessment in line with current best practices. 1. Define your risk assessment methodology ISO 27001 does not prescribe a single methodology. Rather, organisations must tailor the approach to fit their needs. Your methodology should clearly define: Consistency and clarity in these definitions ensure reliable and comparable results across your
The post 7 Steps to a Successful ISO 27001 Risk Assessment – Updated for 2025 appeared first on IT Governance Blog.

Read More
X