Commit 7d3e80ebf1
Unsigned
Layout: unified · split
content/blog/2021-12-04-cisa.org +11 −11
| @@ -5,21 +5,21 @@ | |||
| 5 | 5 | ||
| 6 | * What is the CISA? | 6 | * What is the CISA? |
| 7 | 7 | ||
| 8 | For those of you lucky enough not to be knee-deep in the world of IT/IS | 8 | For those of you lucky enough not to be knee-deep in the world of information |
| 9 | Auditing, the [[https://www.isaca.org/credentialing/cisa][CISA]] (Certified Information Systems Auditor) certification and | 9 | technology (IT) and information systems (IS) auditing, the [[https://www.isaca.org/credentialing/cisa][CISA]] (Certified |
| 10 | exam are part of ISACA's suite of certifications. As I often explain it to | 10 | Information Systems Auditor) certification and exam are part of ISACA's suite of |
| 11 | people like my family, it basically means you're employed to use your knowledge | 11 | certifications. As I often explain it to people like my family, it basically |
| 12 | of information systems, regulations, common threats, risks, etc. in order to | 12 | means you're employed to use your knowledge of information systems, regulations, |
| 13 | assess an organization's current control of their risk. If a risk isn't | 13 | common threats, risks, etc. in order to assess an organization's current control |
| 14 | controlled (and the company doesn't want to accept the risk), an IS auditor will | 14 | of their risk. If a risk isn't controlled (and the company doesn't want to |
| 15 | suggest implementing a control to address that risk. | 15 | accept the risk), an IS auditor will suggest implementing a control to address |
| 16 | that risk. | ||
| 16 | 17 | ||
| 17 | Now, the CISA certification itself is, in my opinion, the main certification for | 18 | Now, the CISA certification itself is, in my opinion, the main certification for |
| 18 | this career. While certifications such as the CPA (Certified Public Accountant) | 19 | this career. While certifications such as the CPA (Certified Public Accountant) |
| 19 | or CISSP (Certified Information Systems Security Professional) are beneficial, | 20 | or CISSP (Certified Information Systems Security Professional) are beneficial, |
| 20 | nothing matches the power of the CISA for an information systems (IS) auditor | 21 | nothing matches the power of the CISA for an IS auditor when it comes to getting |
| 21 | when it comes to getting hired, getting a raise/bonus, or earning respect in the | 22 | hired, getting a raise/bonus, or earning respect in the field. |
| 22 | field. | ||
| 23 | 23 | ||
| 24 | However, to be honest, I am a skeptic of most certifications. I understand the | 24 | However, to be honest, I am a skeptic of most certifications. I understand the |
| 25 | value they hold in terms of how much you need to commit to studying or learning | 25 | value they hold in terms of how much you need to commit to studying or learning |