Protection of Information Assets: Security Event Management (ISACA CISA)

This course covers the Security Event Management portion of the Protection of Information Assets domain of the CISA (Certified Information Systems Auditor) exam content outline. Combined with the companion domain course on Information Asset Security and Control, this domain accounts for approximately 26% of the total exam. This course focuses on the audit objectives of security awareness training and programs, information system attack methods and techniques, security testing tools and techniques, incident response management, and evidence collection and forensics.

This domain, taken as a whole, represents about 26% of the CISA examination.

Computer crime is a term that is not always used precisely. Many crimes described as "computer crime" are simply traditional crimes — fraud, abuse, stalking — that now happen to use a computer as the tool, and are typically prosecuted under existing traditional laws rather than requiring new computer-specific statutes. A true computer crime is a crime committed against a computer or network itself — for example, malware designed specifically to cause damage, take over systems, or deprive legitimate users of their rights and abilities. Malware i...