The Process of Auditing Information Systems
Governance and Management of IT
Information Systems Acquisition, Development and Implementation
Information Systems Operations, Maintenance and Support
Protection of Information Assets

CISM topics:

Information Security Governance
Information Security Program Development
Information Security Program Management
Incident Management and Response


You need to know the basics of new IT technologies but you also need to know the older technologies since many old stuff are still at work in the modern business world.

CISA and CISM are supposed to be different in that one focuses on auditing and another on management. HOWEVER, they are practically sharing many of the knowledge areas. Think about it, the IS auditor needs to know management so they can audit IS management. On the other hand, management needs to know IS auditing so they can request for and evaluate the various audit options. Experience shows that clear-cut boundaries between the involved topics can hardly be established. Studying on a track-by-track basis may save you time, but the coverage received may not be sufficient for clearing the exam. In fact it may be a way better approach for you to go through everything included in this guide as a whole, rather than to restrict your focus on the track specific topics (when they overlap so much you better play safe).

When we develop our material we do not classify topics the BOK way. We follow our own flow of instructions which we think is more logical for the overall learning process. Don’t worry, it does not hurt to do so, as long as you truly comprehend the material.

This single ALL-IN-ONE exam book covers:

• CISM Study Material
• CISA Study Material

Review the study guide TOC (in PDF format) here.