We may earn an affiliate commission when you visit our partners.
Course image
Pearson
Enroll now

What's inside

Syllabus

Save this course

Create your own learning path. Save this course to your list so you can find it easily later.
Save

Career center

Learners who complete CISA Certified Information Systems Auditor: Unit 1 will develop knowledge and skills that may be useful to these careers:
Information Systems Auditor
An Information Systems Auditor plays a vital role in evaluating an organization's information technology infrastructure and processes to ensure they are secure, efficient, and compliant with regulations. This course directly aligns with the core responsibilities of an Information Systems Auditor, providing foundational knowledge in auditing concepts and their critical role in enhancing organizational security. Learners will gain an understanding of audit project management and effective data sampling techniques, which are crucial for conducting thorough system audits. The emphasis on applying industry-standard frameworks and helping organizations improve information security practices makes this an ideal stepping stone into this career.
IT Auditor
An IT Auditor focuses on reviewing and assessing an organization's information technology systems, applications, and operations. This role is crucial for identifying vulnerabilities, ensuring data integrity, and verifying compliance. This course offers a robust introduction to the fundamental concepts of auditing and its critical importance in organizational security, directly relevant to an IT Auditor's daily tasks. Learners will acquire knowledge of audit project management and data sampling techniques, essential for executing effective IT audits. Furthermore, the course's focus on helping organizations improve their information security practices prepares individuals to make tangible contributions in an IT Auditor capacity.
Cybersecurity Auditor
A Cybersecurity Auditor specializes in evaluating an organization's cybersecurity posture, identifying weaknesses, and ensuring adherence to security policies and industry best practices. This course is highly relevant for aspiring Cybersecurity Auditors, as it deepens understanding of auditing's critical role in enhancing organizational security. Learners will explore audit project management and practical data sampling techniques, which are indispensable for conducting comprehensive cybersecurity assessments. The curriculum's emphasis on applying industry-standard frameworks and empowering individuals to help organizations improve their overall information security practices is particularly beneficial for a career as a Cybersecurity Auditor.
Governance Risk and Compliance Specialist
A Governance Risk and Compliance Specialist integrates and manages an organization's governance practices, risk management processes, and compliance requirements. This course provides a foundational understanding of auditing, which is central to all three pillars of GRC. Learners will delve into the critical role of audits in enhancing organizational security and identifying risks, enabling them to contribute effectively to GRC strategies. The course's emphasis on audit project management and the application of industry-standard frameworks directly supports the structured and methodical approach required for a Governance Risk and Compliance Specialist to build and maintain robust organizational oversight.
Information Security Consultant
An Information Security Consultant advises organizations on strategies to protect their information assets, often involving assessments, policy development, and implementation of security controls. This course is highly beneficial for an Information Security Consultant. It equips individuals with fundamental auditing concepts and an understanding of auditing's critical role in enhancing organizational security. Consultants regularly perform assessments that mirror audit activities. Knowledge of audit project management, effective data sampling techniques, and applying industry-standard frameworks directly translates into the ability to assess client environments effectively and recommend robust improvements to their information security practices.
Compliance Officer
A Compliance Officer ensures that an organization adheres to applicable laws, regulations, and internal policies, often with a significant focus on data privacy and information security mandates. This course provides a structured approach to understanding how audits verify adherence to these standards. Learners will grasp the fundamental concepts of auditing and its critical role in enhancing organizational security, which is paramount for a Compliance Officer. The application of industry-standard frameworks, as taught, is directly relevant to navigating complex regulatory landscapes and establishing robust compliance programs within an organization.
Vendor Risk Management Specialist
A Vendor Risk Management Specialist assesses and mitigates the risks associated with third-party vendors, particularly concerning their information security practices and compliance. This course is highly relevant, as it provides fundamental concepts of auditing and its critical role in enhancing organizational security. For a Vendor Risk Management Specialist, applying effective data sampling techniques and industry-standard frameworks, as taught in this course, is crucial for evaluating vendor controls and ensuring they meet organizational and regulatory requirements. This expertise enables specialists to effectively audit vendor security postures and help improve their information security practices.
Risk Management Analyst
A Risk Management Analyst identifies, assesses, and mitigates potential risks to an organization's assets and operations, often with a significant focus on information technology risks. This course offers a strong foundation for this role by introducing basic concepts of auditing and understanding risks. Learners will gain insights into the critical importance of audits in identifying vulnerabilities and their role in enhancing organizational security. The curriculum's discussion of audit project management and applying industry-standard frameworks directly supports the structured approach a Risk Management Analyst takes to evaluate and manage risks across an enterprise.
Internal Auditor
An Internal Auditor provides independent, objective assurance and consulting services designed to add value and improve an organization's operations. While internal auditing covers various domains, an understanding of IT and information security is increasingly vital. This course introduces the basic concepts of auditing and its critical role in enhancing organizational security, directly applicable to an Internal Auditor's work. It helps build a foundation in audit project management and effective data sampling techniques, which are universal auditing skills. Furthermore, the ability to help organizations improve information security practices is a valuable asset for any Internal Auditor in today's digital landscape.
Data Protection Officer
A Data Protection Officer (DPO) oversees an organization's data protection strategy and implementation to ensure compliance with privacy regulations like GDPR. This course provides crucial insights into how audits verify compliance and enhance security around sensitive data. Learners will understand the critical role of audits in enhancing organizational security—a direct concern for data protection. The course's focus on industry-standard frameworks and helping organizations improve their information security practices directly supports a DPO's responsibility to establish robust data protection controls and ensure ongoing adherence to privacy mandates.
Information Security Analyst
An Information Security Analyst is responsible for protecting an organization's computer systems and networks from cyber threats. This includes monitoring for security breaches, implementing security measures, and responding to incidents. While not solely an auditing role, the principles learned in this course are highly valuable. The course's focus on the fundamental concepts of auditing and its critical role in enhancing organizational security provides a crucial perspective for an Information Security Analyst. Understanding how audits identify risks and improve security practices offers a holistic view, complementing technical skills by enabling analysts to build more secure systems and processes.
Chief Information Security Officer
A Chief Information Security Officer (CISO) is a senior-level executive responsible for an organization's comprehensive information and data security strategy. This role typically requires extensive experience, often including an advanced degree. This course provides a fundamental understanding of auditing concepts and their critical role in enhancing organizational security, which is a key pillar of a CISO's leadership. While a CISO primarily focuses on strategy, familiarity with audit project management, data sampling, and industry-standard frameworks helps in overseeing audit processes and ensuring the organization's security posture is rigorously evaluated and continually improved, driving strategic security initiatives.
Security Program Manager
A Security Program Manager oversees and coordinates multiple cybersecurity initiatives and projects, ensuring they align with an organization's security strategy and objectives. This course provides a foundational understanding of auditing and its critical role in enhancing organizational security. For a Security Program Manager, knowing how audits identify risks and assess the effectiveness of security controls is essential for designing and implementing robust security programs. The course's emphasis on audit project management and applying industry-standard frameworks directly contributes to the ability to manage security initiatives in a structured, compliant, and continuously improving manner, driving program success.
IT Project Manager
An IT Project Manager guides technology initiatives from conception to completion, often encompassing complex security implementations or compliance upgrades. While primarily focused on delivery, understanding audit processes is invaluable. This course may be useful by providing a module on audit project management, alongside knowledge of effective data sampling and industry-standard frameworks. This directly equips an IT Project Manager to lead security-focused projects more effectively, helping them embed security best practices, anticipate compliance requirements, and ensure project outcomes contribute positively to enhancing organizational security, making them a more well-rounded and security-aware project lead.
Security Operations Center Analyst
A Security Operations Center Analyst monitors, detects, analyzes, and responds to cybersecurity incidents. While primarily operational, understanding the broader security landscape and audit requirements is valuable. This course may be useful by providing an understanding of the critical role of audits in enhancing organizational security. This perspective can help an SOC Analyst appreciate why certain security controls are in place and how their operational activities contribute to overall audit readiness and compliance. The insights into risks and industry-standard frameworks can also inform their threat detection and response strategies, linking their daily work to broader security assurance goals.

Reading list

We've selected 45 books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in CISA Certified Information Systems Auditor: Unit 1.
This study guide is designed to help candidates prepare for the Certified Information Systems Auditor (CISA) exam. It covers all the topics that are tested on the exam, including information systems auditing, control, and security.
A definitive guide to financial risk management, this handbook provides in-depth analysis of methods for measuring and managing risk in financial institutions. It covers various types of financial risk and crucial reference for professionals and advanced students in finance.
This manual comprehensive resource covering a wide range of compliance and ethics topics. Often updated annually, it serves as a practical guide and reference tool for compliance professionals. It is particularly useful for understanding the various components of a compliance program and staying current with best practices. This go-to reference for practitioners.
This influential book challenges conventional notions of risk and probability by focusing on the impact of rare and unpredictable events ("black swans"). It argues that these events have a disproportionate impact on the world and that we are often ill-equipped to deal with them. It's a provocative read that encourages a different way of thinking about risk and uncertainty.
A practical guide specifically for understanding and implementing the GDPR. is crucial for anyone dealing with the data of EU residents, offering step-by-step guidance on achieving and maintaining compliance with one of the most significant data privacy regulations globally. It is particularly useful for professionals and organizations operating internationally.
Provides a concise and comprehensive overview of how to audit information systems. It covers all the essential elements, including: planning, risk assessment, internal control evaluation, testing, reporting, and follow-up.
Provides a foundational understanding of risk management and insurance principles, making it ideal for those new to the topic or seeking a broad overview. It covers basic concepts, traditional insurance, and introductory enterprise risk management, serving as a valuable textbook for undergraduate programs and a solid starting point for professionals.
This handbook provides a comprehensive academic overview of compliance, covering a wide range of topics and perspectives from leading researchers. It is valuable for deepening understanding and exploring the theoretical underpinnings of compliance. is suitable for advanced undergraduate students, graduate students, and researchers seeking a broad scholarly perspective.
Focused specifically on operational risk in the financial services industry, this book provides a detailed guide to managing this critical area. It covers frameworks, techniques, and best practices for identifying, assessing, and mitigating operational risks. It's essential for professionals working in risk management within banks and financial institutions.
Focused specifically on the ISO 27001 standard for information security management systems, this guide details the controls and processes for implementation and auditing. It is essential for organizations seeking ISO 27001 certification and provides in-depth knowledge for compliance professionals in information security. valuable reference for those involved in information security compliance.
Aligned with international standards like ISO 31000 and the COSO ERM Framework, this book offers a comprehensive introduction to enterprise risk management. It covers identification, analysis, and treatment of various risks, including emerging trends. It's suitable for students and risk professionals seeking a thorough grounding in ERM principles and practices.
Challenges traditional, rules-based approaches to compliance and advocates for a more integrated, ethics-driven model. It's valuable for deepening understanding by exploring the 'why' behind compliance failures and offering practical strategies for building a more effective compliance culture within organizations. It is relevant for both students and professionals seeking to improve compliance programs.
Offers guidance on the various aspects of information law, including data protection and privacy. Given the increasing importance of data privacy regulations like GDPR and CCPA, this book is highly relevant for understanding contemporary compliance challenges in this area. It valuable reference for legal practitioners and compliance professionals dealing with data.
This textbook provides a comprehensive treatment of financial risk management, covering market, credit, and operational risks within financial institutions. It's widely used in undergraduate and graduate finance programs and solid resource for understanding the principles and practices of financial risk management.
Offers a critical look at common risk management practices and argues for more quantitative approaches. It challenges conventional wisdom and provides insights into improving risk assessment and decision-making. It's valuable for both students and professionals looking to refine their risk management methodologies.
Provides a comprehensive international perspective on data privacy laws, covering various jurisdictions beyond just the GDPR. It is valuable for understanding the global landscape of data protection compliance and the challenges of navigating different legal frameworks. This key reference for professionals dealing with international data transfers and privacy compliance.
Provides an overview of major IT security standards and frameworks relevant to cybersecurity compliance, such as ISO 27001, NIST, and PCI-DSS. It helps solidify understanding of the technical controls necessary for a robust compliance program in the cybersecurity domain. This is an important reference for IT security practitioners and compliance professionals in technology-focused roles.
Provides real-world examples and case studies of how organizations have implemented enterprise risk management. It offers practical insights into the challenges and successes of ERM implementation, making it valuable for those involved in establishing or improving an ERM program.
Delves into the complexities of financial regulation and compliance, particularly the challenges of navigating multiple regulatory bodies. Written by a former Inspector General of the SEC, it offers practical guidance for compliance professionals in the financial services industry. It valuable resource for understanding the specific compliance landscape of finance.
Delves into practical issues and presents case studies related to the execution of Enterprise Risk Management programs. It provides insights from senior risk management professionals and explores how organizations measure the impact of ERM. It is particularly useful for understanding real-world challenges and best practices in ERM implementation.
This handbook provides a comprehensive guide to the interconnected areas of governance, risk management, and compliance (GRC). It covers frameworks, best practices, and practical guidance for implementing an integrated GRC program. It's a valuable reference for professionals responsible for GRC in their organizations.
Explores the art and science of prediction in various fields, from weather forecasting to finance. It examines why some predictions succeed while many fail, emphasizing the importance of probability and understanding uncertainty. It offers valuable lessons for risk managers who rely on forecasting and data analysis.
Provides a comprehensive overview of key concepts and techniques in financial risk management, covering market risk, credit risk, and operational risk. It offers practical insights into identifying, assessing, and mitigating these risks and valuable resource for students and professionals in finance.
Considered a classic, this book provides a historical perspective on the development of risk management and probability. It traces the evolution of our understanding of risk from ancient times to the modern era, offering valuable context for the field today. It's an engaging read for anyone interested in the intellectual history of risk.
Focused specifically on risk management within the context of projects, this book provides practical guidance and techniques for identifying, analyzing, and responding to project risks. It's a valuable resource for project managers and teams, often used as a reference or textbook in project management programs.
Offers a broad introduction to the interconnected fields of governance, risk management, and compliance (GRC). It provides a high-level overview suitable for gaining a foundational understanding of how these elements are critical for organizational success and avoiding major pitfalls. It is particularly useful for students and professionals new to the comprehensive scope of compliance.
Explores the application of behavioral science to ethics and compliance programs. It offers a contemporary perspective on designing compliance initiatives that are more effective by considering how people actually make decisions. This must-read for compliance professionals looking to enhance the impact of their programs.
Explores how organizations can integrate risk management into their strategic planning process to gain a competitive advantage. It goes beyond traditional compliance-based risk management to focus on how managing risk can create value. It's relevant for senior management and strategists.
A practical guide focusing on Know Your Customer (KYC) compliance, a critical component of AML and financial crime prevention. provides hands-on guidance for compliance professionals involved in customer due diligence and identity verification. It useful reference for those working in financial institutions and other regulated entities.
Takes a more academic approach to corporate compliance, examining it through the lens of behavioral psychology and legal theory. It is valuable for deepening understanding of the complexities and challenges of achieving true compliance beyond a tick-box mentality. Suitable for graduate students and researchers interested in the theoretical aspects of compliance.
A foundational text in behavioral ethics, this book explores the concept of 'bounded ethicality' and why well-intentioned people can still make unethical choices. Understanding these psychological aspects is crucial for building effective compliance programs that address human behavior. provides valuable background knowledge for anyone in the compliance field.
Presents a comprehensive overview of the principles and techniques of IT auditing. It covers all the essential elements, including: planning, risk assessment, internal control evaluation, testing, reporting, and follow-up.
This textbook provides a comprehensive overview of risk management for information systems. It covers all aspects of risk management, from risk identification and assessment to risk mitigation and monitoring.
Focusing on the practical aspects of the compliance professional's role, this book provides actionable advice and insights into developing essential skills like influence and persuasion. It's highly relevant for those looking to understand the day-to-day realities and necessary competencies for a successful career in compliance. is more focused on the 'how-to' and is excellent for aspiring and current compliance officers.
Offers a concise and practical guide specifically focused on Anti-Money Laundering (AML) compliance. It's an excellent resource for gaining a foundational understanding of AML principles and regulations, particularly for those in the financial sector or related fields. It serves as a good starting point for understanding a key area of compliance.
Although focused on environmental regulation, this book introduces the concept of 'Next Generation Compliance,' which involves building compliance drivers directly into regulations. This provides insights into contemporary approaches to regulatory design and enforcement, relevant for understanding evolving compliance strategies across sectors. It is valuable for policymakers and compliance professionals interested in regulatory effectiveness.
Practical guide to IT auditing. It covers all the essential elements, including: planning, risk assessment, internal control evaluation, testing, reporting, and follow-up.
This concise book offers a broad, accessible overview of the concept of risk from multiple perspectives, including psychological and societal. It's an excellent starting point for anyone wanting to understand the fundamental nature of risk and how we perceive and deal with it in everyday life and various domains. It provides essential background knowledge before diving into more technical aspects of risk management.
Provides a foundational understanding of business ethics, which is intrinsically linked to compliance. It explores ethical dilemmas and frameworks relevant to the business environment, helping readers understand the ethical considerations that underpin many compliance requirements. This good introductory text for students and professionals seeking to understand the ethical dimension of compliance.
While not strictly a compliance book, this text on psychological safety is highly relevant to fostering a speak-up culture essential for effective compliance programs. It provides insights into creating an environment where employees feel safe to raise concerns without fear of retaliation, which is critical for identifying and addressing compliance issues. Useful for compliance leaders and HR professionals.
This classic textbook provides a comprehensive overview of the auditing process. It covers all aspects of auditing, from planning and risk assessment to reporting and follow-up.
While focused on education, this book explores ethical leadership and decision-making frameworks that are transferable to any organizational setting. Understanding ethical decision-making is fundamental for fostering a culture of integrity that supports compliance. is valuable for developing ethical reasoning skills relevant to compliance challenges.
While a short introduction, this book provides valuable context on the nature and impact of corruption globally. Understanding corruption is fundamental to anti-bribery and corruption compliance efforts. offers a concise overview suitable for gaining background knowledge on a critical area of compliance focus.

Share

Help others find this course page by sharing it with your friends and followers:

Similar courses

Here are eight courses similar to CISA Certified Information Systems Auditor: Unit 1.
The Cybersecurity Career Ladder
Most relevant
Risk Management Excellence - NIST 800-37 Framework...
Most relevant
The Zero Trust Framework
Most relevant
IT Audit: Cybersecurity Audit Project
Most relevant
ISO/IEC 27001:2022 Information Security Controls Explained
Most relevant
Information Systems Auditing: Information Systems...
Most relevant
The Information Systems Auditing Process: Audit Planning
Most relevant
Introduction to the Microsoft Identity and Access...
Most relevant

Coursera Buyer Protection & Guarantee

Verified partner policies & purchase protections

Accredited University Partner
Free Trial & Audit

7-Day Free Trial & Free Audit

7-day free trial on monthly Coursera Plus subscriptions; free audit option available on most individual courses to explore video lectures and readings at no charge.

Return & Refund Policy

14-Day Refund Guarantee

14-day refund window on annual Coursera Plus subscriptions and single-course purchases prior to certificate issuance. Monthly subscriptions do not offer refunds once billed.

Buyer Protections

Verified Academic & Industry Partner

Accredited university and industry certifications (e.g. Stanford, Google, IBM, Yale), secure SSL payment processing, and verifiable digital certificate links.

Key Purchase Protections
14-day refund window on annual Coursera Plus and single courses
7-day free trial on monthly Coursera Plus subscriptions
Free course audit option for lectures and readings
Verified certificates from top universities & companies
OpenCourser Verified Partner Policy details last reviewed: 2026-10-22
Our mission

OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.

Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.

Find this site helpful? Tell a friend about us.

Affiliate disclosure

We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.

Your purchases help us maintain our catalog and keep our servers humming without ads.

Thank you for supporting OpenCourser.

© 2016 - 2025 OpenCourser