what is a certified information systems auditor cisa 
certified information systems auditor cisa refers to a designation issued by the information systems audit and control association isaca the designation is the global standard for professionals who have a career in information systems in particular auditing control and security cisa holders demonstrate to employers that they have the knowledge technical skills and proficiency to meet the dynamic challenges facing modern organizations understanding certified information systems auditors cisas to receive a certified information systems auditor certification candidates must pass a comprehensive exam and satisfy industry work experience requirements candidates must also undergo continuing education and professional development and adhere to isaca s code of professional ethics and information systems auditing standards responsibilities of a certified information systems auditorcertified information systems auditors are often in charge of appraising a company s technology related systems and assessing a company s set up for vulnerabilities a cisa will often be tasked with implementing an audit strategy to review potential risk areas as well as executing and overseeing that audit a cisa is often heavily involved in processes before and after an audit as well before doing any testing a cisa will evaluate a company s objectives systems and risks to better understand its potential vulnerabilities and strengths after the audit a cisa delivers the audit results and often makes recommendations to management for steps to perform if as suggestions are approved and adopted by management the cisa will often be involved in the implementation and monitoring of security upgrades this includes performing new tests once the recommendations have been put in place or ensuring management has followed through on control changes in addition to overseeing audits a cisa will often have less formal projects with management on review practices building risk strategies performing continuity planning and monitoring it personnel a cisa may also be responsible for drafting and maintaining up to date it policies standards or procedures the cisa exam costs 575 for isaca members and 760 for non members 