Watch CISA Certified Information Systems Auditor

In this episode, Daniel and Brian continue their discussion of protecting IS assets. Here they turn their focus towards logical access controls and biometric devices (hand/fingerprint, facial recognition, iris/retina) and voice recognition. They discuss the Type-1 and Type-2 errors associated with those devices. Finally, they describe external attacks from Malware (viruses, worms, trojans) to DOS/

In this episode, Daniel and Brian discuss conducting reviews of IT systems. They start by going through the different types of storage like local storage (Physical Spinning Drives & SSD), attached storage (SAN & NAS), and removable storage(flash). They also discuss network devices (routers & switches). Finally they cover network redundancy and management devices like SEIMs, Firewalls, and DMZs.

In this episode, Daniel and Brian discuss the Human Resource element of systems acquisition, development, and implementation. They give you an overview of the many IT job roles like IT Operations Manager, System Architect, Change Control Manager, App developer, and Help Desk Support, and their importance.

In this episode, Brian and Mike discuss governance and management of IT. They talk about the role of a steering committee, and the difference between tactical and strategic planning. They also talk about how regulations like HIPPA and Sarbanes Oxley fit into governance.

In this episode, Brian and Mike talk about enterprise risk management, quality assurance and quality management. They also discuss the concept and importance of key performance indicators, balance scorecards. They then talk about vendor selection and how that affects an organizations risk.

In this episode, Brian and Mike discuss best practices and tips for preparing for the CISA exam.