1. Introduction - Cyber Security Audit Fundamentals FREE CHAPTER

• Introduction
• Information Security vs Cybersecurity
• Understanding Cybersecurity
• Information Security vs Cybersecurity
• Information Security Principles
• Cybersecurity & Organizational Structure

2. Cybersecurity Audit

• IT Audit Introduction
• Types of IT Audit
• Internal vs External Auditor
• Types of IT Audit II
• Introduction to Cybersecurity Audit
• Internal Audit Team - Roles & Responsibilities
• Performing Cybersecurity Audit
• IT Auditors & Cybersecurity Auditors Skillset

3. IT Controls

• Understanding Controls
• Types of IT Controls
• Cybersecurity Controls
• Identifying Control Weakness
• Control Design
• Control Effectiveness
• Control Gap

4. Cybersecurity Frameworks & Standards

• Cybersecurity Frameworks
• NIST Framework
• ISO 27001 Framework
• CIS Framework
• Internal Auditors & Frameworks
• HIPAA
• PCI DSS
• Frameworks & Standards

5. Cybersecurity Audit Process

• Cybersecurity Audit Process
• Planning Phase
• Fieldwork Phase
• Reporting Phase
• Follow-Up Phase
• IT Audit Team

6. Performing Cybersecurity Audit

• Planning
• Fieldwork
• Testing Technical Controls
• Identity & Access Management (IAM)
• Password Configuration Testing
• Access Provisioning Testing
• Access Deprovisioning Testing
• Privileged User Access Testing
• Segregation of Duties (SOD) Testing
• Data Integrity Testing
• Vulnerability Assessment Testing
• Patch Management Testing
• Firewalls & Intrusion Detection Testing
• Endpoint Testing
• Network Testing
• Business Continuity Plan Testing
• Change Management Testing
• Incident Management Testing
• Operational Controls
• Policies & Procedures Testing
• Risk Assessment & Management Testing
• Security Awareness Training Testing
• Vendor Management Testing
• Physical Access Testing
• Reporting Phase
• Cybersecurity Audit Testing Outcomes
• Reporting Test Results
• Reporting Control Deficiency
• Follow-Up Phase

7. Introduction - The Ultimate Guide to IT Auditing

• Course Introduction
• IT Audit Introduction
• Importance of IT Audit
• Sarbanes-Oxley (SOX) Act
• Sarbanes-Oxley (SOX) Compliance

8. IT Audit Frameworks

• IT Audit Frameworks
• COSO Framework
• COBIT Framework

9. Types of IT Audit

• IT Audit Types
• Financial Statement Audit
• Internal Audit
• Attestation Engagement
• Internal Auditor vs External Auditor

10. IT Controls - ITGC & ITAC

• Understanding IT Controls
• IT General & Application Controls (ITGC)
• IT General Controls (ITGC) Domain
• Access Controls
• Change Management Controls
• IT Operations Controls
• System Development Life Cycle (SDLC) Controls
• IT Application Controls (ITAC)
• Relationship between ITGC & ITAC

11. IT Audit Process

• IT Audit Process
• Planning
• Fieldwork
• Reporting
• Follow-Up

12. Understanding Control Design & Operation

• Identifying Control Weakness
• Key Control & Non-Key Control
• Applications Risk Level
• Internal Audit Team
• Audit Workpaper
• IT Infrastructure In-Scope for Testing

13. Performing an IT Audit

• Planning Phase
• Fieldwork Phase
• Password Configuration Controls Test
• User Access Authorization Controls Test
• Privileged Access & Generic ID Controls Test
• Segregation of Duties (SOD) Controls Test
• Change Management Controls Test
• IT Operation Controls Test
• System Development Life Cycle (SDLC) Controls Test
• Control Deficiencies - Test Outcomes
• Reporting Phase

14. Attestation Engagement Test - SOC Audit

• Service Organization Controls (SOC) Audit
• SOC Categories & Types
• SOC 2 Test Requirements
• SOC 2 Testing
• SOC Report
• SOC Report Review/Test I
• SOC Report Review/Test II
• SOC Report Review/Test III

15. Introduction - Cloud Audit Essentials

• Introduction
• Understanding Cloud Computing
• Cloud Computing History
• What is Cloud
• What is A Server
• Services Provided by Servers
• Understanding Virtual Machines (VMs)
• Cloud Computing vs Virtualization
• Benefits of Cloud Computing
• Cloud Service Providers (CSP)
• Cloud Deployment Models
• Cloud Service Models
• Solutions & Services in a Cloud Ecosystem
• AWS Compute Services
• Azure Compute Services
• Google Cloud Platform (GCP) Compute Services

16. Cloud Governance

• Cloud Governance
• Cloudification
• Risks Associated with Cloud Computing
• Shared Responsibility Model

17. Audit & Frameworks

• Types of Audits
• What is IT Audit
• Who Performs a Cloud Audit
• Introduction to Cloud Frameworks
• Cloud Frameworks - NIST, ISO 27017, CSA - CCM
• Understanding Internal Controls
• Identifying Control Weaknesses
• Control Design
• Control Effectiveness
• Control Gap

18. Cloud Audit

• Cloud Audit - Cloud Controls Matrix (CCM)
• CSA Control Domains
• Cloud Audit Process
• Planning Phase
• Fieldwork Phase
• Reporting Phase
• Follow-Up Phase

19. Cloud Controls Testing

• Applications & Interface Controls Test
• Governance Risk & Compliance Controls Test
• Identity & Access Management (IAM) Controls Test
• Data Security & Privacy Controls Test
• Logging & Monitoring Controls Test
• Change Management Controls Test
• Incident Management Controls Test
• Threat & Vulnerability Management Controls Test
• Endpoint Management Controls Test
• Infrastructure & Virtualization Controls Test
• Human Resources Controls Test
• Business Continuity Management Controls Test

20. Cloud Service Providers (CSP) Environment

• Assessing Cloud Service Providers (CSP) Environment
• Service Organization Controls (SOC) Report
• SOC Audit Categories & Types
• Understanding a SOC Report
• Reviewing a SOC Report

21. Introduction - IT Audit Application Walkthrough

• Introduction
• Walkthrough Questionnaire
• Walkthrough Questionnaire & Audit Client
• Questionnaire - System/Application Information
• Questionnaire - System/Application Information II
• Questionnaire - Access Provisioning
• IT Auditors & Audit Client
• Access Deprovisioning
• User Access Review

22. Walkthrough Questionnaire

• Questionnaire - Application Sign-On
• Systems and Application Password Configuration
• Change Management
• Data Backup & Recovery
• Applications, Servers & Databases
• Applications, Servers & Databases II
• Data Backup Schedule
• Recommendations
• Data Backup Notifications
• Data Backup Location
• Incident Management

23. Application Walkthrough

• Preparing for a Walkthrough
• IT Audit Team and Application Owners
• Systems & Application Information
• Systems & Application Interfaces
• Access Provisioning & Deprovisioning
• User Access Review
• Live Sign-On to Application
• Privilege & General Users Review

24. Backup & Recovery

• Password Configuration Review
• Change Management Review
• Data Back-Up & Recovery
• Walkthrough Meeting Wrap-Up

25. Getting Ready for Your Interview

• Introduction
• Getting Ready for Your Interview
• Review the Job Description
• Know the Company
• Know Your Resume
• Prepare for the Interview
• Don't Be Late
• Stay Relevant & Concise
• Follow Up After the Interview

26. IT Audit Practical Interview Questions & Answers I

• Tell Me About Yourself
• IT Audit Project Recently Conducted
• Test of Control Design
• Test of Control Effectiveness
• Determine Sample Size
• IT Controls Tested
• IT Audit Process
• Scoping In Applications
• IT Infrastructure Tested
• Performing a Risk Assessment
• Identifying Control Deficiencies
• Experience Testing Cloud Environment
• Risks Associated with Cloud Computing
• Verifying Information Provided by Entity (IPE)

27. IT Audit Practical Interview Questions & Answers II

• Testing Access Controls
• Common Issues When Testing Access Controls
• Testing Change Management Controls
• Common Issues When Testing Change Management Controls
• Testing Backup & Recovery Controls
• Common Issues When Testing Backup & Recovery Controls
• Testing Software Development Life-Cycle Controls
• Common Issues When Testing Software Development Life-Cycle Controls
• What is Sarbanes-Oxley (SOX) Audit
• Experience with Service Organization Controls (SOC) Audit

28. IT Audit Technical Interview Questions & Answers

• IT Audit Tools
• What is IT Audit
• Importance of IT Audit
• What is Segregation of Duties (SOD)
• IT Audit Frameworks
• Types of Controls
• Challenges Faced During IT Audit
• Leaving Current Job
• IT Audit Reports Format
• Prioritizing IT Audit Findings
• Documenting Test Results
• Typical Day as an IT Auditor
• Salary Expectation

29. IT Audit Behavioral Interview Questions & Answers

• Delivering Difficult IT Audit Outcome to Management
• Difficulties Obtaining IT Audit Evidence
• Resistance from Stakeholders During an IT Audit
• Communicating IT Audit Findings to Non-Technical Stakeholders
• Working Under Pressure
• Difficult Co-Worker
• Working Independently or Collaboratively
• Why Would You Like to Work at This Company
• Tell Me About Your Strengths
• Tell Me About Your Weaknesses
• Do You Have Any Questions