Education
512 Points
Joined May 2012
Hi Guys
I'm sharing my suggestion on the sequence of chapters for ISCA, along with logic for the same. Maybe you find it useful.
ISCA syllabus consists of 10 chapters.
1. First of all, understand the basic concepts of Information Systems in Chapter 1 – Information System Concepts. In this chapter, you would study various types of Information Systems, and one of them is ERP.
2. This ERP becomes the basis for next chapter i.e. Chapter 2 – An overview of Enterprise Resource Planning (ERP).
3. Having read about Information Systems in general and one of them i.e. ERP in detail, you should then study the various aspects concerned with the development of these Information Systems in Chapter 3 – Systems Development Life Cycle
4. Now, it is important to ensure that the Information Systems are protected from various threats such as viruses etc. So, you should study various types of controls in Chapter 4 – Control Objectives.
5. Once you have studied the various types of controls, you should study how to test these controls in the Chapter 5 – Audit Test of General and Automated Controls.
6. One of the controls mentioned in Chapter 4 has been explained in a separate chapter i.e. Chapter 6 - Business Continuity Planning and Disaster Recovery Planning.
7. For any organization, it is not only important to install controls within Information Systems, but also important to assess the various risks which can cause harm to the Information Systems. Detailed study of these risks is covered in Chapter 7 - Risk Assessment Methodologies and Applications.
8. Various aspects of IT Act 2008 are covered in Chapter 8 - Information Technology (Amended) Act 2008.
9. Controls and risks form the basis of Information Security Policy of the organization, which is Chapter 9 - Drafting of IS Security Policy, Audit Policy, IS Audit Reporting - A Practical Perspective.
10. There are different standards (just like Auditing standards), which provide the guidelines etc for testing controls, which are covered in Chapter 10 - Information Systems Auditing Standards, Guidelines, Best Practices.
Regards
CA Vikram Kapoor
B.Com, FCA, CIA, ISA, CISA, CFE, NCFM
Ex-Faculty, NIRC of ICAI (2011-12)