CISA Exam - What Should I Memorize?

KarinC

I plan to take my CISA exam in December. I like to start exam prep by identify what needs to be memorized so that I can get a head start on that while I study and take practice tests.

Can anyone provide a list items they would recommend for memorization?

Thanks

vasyvasy

Hey Karin, welcome to TE

The short answer is that you should be familiar with all the CISA domains. That being said, if you check out the official info from ISACA, you will see the domains and percentages, as follows:
• The Process of Auditing Information Systems (14%)
• Governance and Management of IT (14%)
• Information Systems Acquisition, Development and Implementation (19%)
• Information Systems Operations, Maintenance and Support (23%)
• Protection of Information Assets (30%)

You would be inclined to focus on the last 2 domains, however this may not be the case: there are many users here that complained about the lack of questions pertaining to this domains in the actual exam

Bottom line is, check out the official CBK (or other resources available) and focus on what you don't know already
Also, memorizing is a funny word here, the questions will be constructed so as to discourage the plain memorization process, it's all about thinking as a manager and putting the info into context

dover

Karin,

From my studies so far, there don't seem to be too many - MEMORIZE THIS - materials. But if I had to name some that I need to commit to memory:

Project Management Methodologies and System Development Life Cycle phases and how auditors play a role in them
Waterfall, Spiral, RAD
Sponsor, manager, OBS, WBS
Organizational Structure, Forms, Roles, Responsibilities
IS Procurement and Implementation phases
IT Service Management
Steps in audit planning
BCP Steps
DR Methodologies and testing phases

I've got the CISA exam scheduled June 8th and at this point I'm not ready.

So for I've been using:
CISA Review Manual 2013
CISA Practice Question Database v13 (CD-ROM)
CISA All in One - Peter Gregory
Information Technology Control and Audit

And supplemental resources
RiskIT Framework
COBIT Documents Family - I joined ISACA for the discounted materials and access to most of the COBIT docs
ValIT
ITAF Framework
ISACA Standards, Guidelines and Procedures

Good luck in December - if I don't make the cut in June, I'll be taking another shot.

KarinC

vasyvasy wrote: »

Hey Karin, welcome to TE
Also, memorizing is a funny word here, the questions will be constructed so as to discourage the plain memorization process, it's all about thinking as a manager and putting the info into context

I assume we will be tested mostly on our ability to apply theory to hypothetical situations. But there is always something to memorize. When I took my PMP, you had to memorize math formulas, the 42 processes and at least some of the inputs/outputs/tools & techniques. That's kind of what I'm looking for.

I do have the 2013 guide and materials from ISACA.

Thanks to those of you who have taken the time to answer so far.

KarinC

dover wrote: »

Karin,
From my studies so far, there don't seem to be too many - MEMORIZE THIS - materials. But if I had to name some that I need to commit to memory...

Thank you, Dover - Your list will be a good start for me to investigate. Good luck on your exam in June!

GoodBishop

I would also second dover's advice to review the secondary materials from ISACA, stuff like CoBIT, ValIT, RiskIT... there is a lot of material there that will be helpful.

badrottie

I would recommend not just trying to memorize things, but understand what they are and where/how they are applied. Rote memorization is for vendor certs, not professional ones. You frequently will be tested on a concept and understanding how it can be utilized, and not just regurgitate an answer.

Jaded99

Memorizing wont help you. I just wrote the CISA a few hours ago, and I can assure you that you wont come across many of the sample questions word-to-word. Most will be re-phrased with different scenarios applied to them, and memorizing wont really help you. You really have to know the material/concept so yo ucan apply it in a given situation. I cant disclose much of what type of questions were on the exam, but this was no cake-walk, unfortunately.

spena

Passed the CISSP CBT (as an Associate) exam yesterday and now I have my eyes set out on CISA this Dec

Just wonder if the CISA Practice Question Database v13 (CD-ROM) is a "must have" as I was surprised about the cost.

GoodBishop

Are you from Canada? I had a coworker who talked about "writing" exams, and she was from Canada.

John82

Planning to take up CISA this Dec. Join you folks . Yes the Practice question CD seems quiet expensive .

Vik210

John82 wrote: »

Planning to take up CISA this Dec. Join you folks . Yes the Practice question CD seems quiet expensive .

Start with CISA Review Manual 2013.. Thats the best thing you can have for this exam.