Commit 7d3e80ebf1
Unsigned
Layout: unified · split
content/blog/2021-12-04-cisa.org +11 −11
| @@ -5,21 +5,21 @@ | ||
| 5 | 5 | |
| 6 | 6 | * What is the CISA? |
| 7 | 7 | |
| 8 | For those of you lucky enough not to be knee-deep in the world of IT/IS | |
| 9 | Auditing, the [[https://www.isaca.org/credentialing/cisa][CISA]] (Certified Information Systems Auditor) certification and | |
| 10 | exam are part of ISACA's suite of certifications. As I often explain it to | |
| 11 | people like my family, it basically means you're employed to use your knowledge | |
| 12 | of information systems, regulations, common threats, risks, etc. in order to | |
| 13 | assess an organization's current control of their risk. If a risk isn't | |
| 14 | controlled (and the company doesn't want to accept the risk), an IS auditor will | |
| 15 | suggest implementing a control to address that risk. | |
| 8 | For those of you lucky enough not to be knee-deep in the world of information | |
| 9 | technology (IT) and information systems (IS) auditing, the [[https://www.isaca.org/credentialing/cisa][CISA]] (Certified | |
| 10 | Information Systems Auditor) certification and exam are part of ISACA's suite of | |
| 11 | certifications. As I often explain it to people like my family, it basically | |
| 12 | means you're employed to use your knowledge of information systems, regulations, | |
| 13 | common threats, risks, etc. in order to assess an organization's current control | |
| 14 | of their risk. If a risk isn't controlled (and the company doesn't want to | |
| 15 | accept the risk), an IS auditor will suggest implementing a control to address | |
| 16 | that risk. | |
| 16 | 17 | |
| 17 | 18 | Now, the CISA certification itself is, in my opinion, the main certification for |
| 18 | 19 | this career. While certifications such as the CPA (Certified Public Accountant) |
| 19 | 20 | or CISSP (Certified Information Systems Security Professional) are beneficial, |
| 20 | nothing matches the power of the CISA for an information systems (IS) auditor | |
| 21 | when it comes to getting hired, getting a raise/bonus, or earning respect in the | |
| 22 | field. | |
| 21 | nothing matches the power of the CISA for an IS auditor when it comes to getting | |
| 22 | hired, getting a raise/bonus, or earning respect in the field. | |
| 23 | 23 | |
| 24 | 24 | However, to be honest, I am a skeptic of most certifications. I understand the |
| 25 | 25 | value they hold in terms of how much you need to commit to studying or learning |