This document provides an introduction to the Certified Information Systems Auditor (CISA) certification. It discusses the historical background that led to increased regulation and oversight of financial reporting and audits. Specifically, it describes several major corporate accounting scandals in the early 2000s that involved financial fraud and resulted in new laws like Sarbanes-Oxley. These scandals showed the need for independent audits and assessment of internal controls to protect assets and ensure the accuracy of financial reporting provided to shareholders. The document concludes by outlining some of the topics that will be covered in future CISA training, including financial concepts, audit processes, information governance, and disaster recovery from an auditor's perspective.

1. INTRODUCTION TO CISA
Certified information systems Auditor
A Historical approach
10.October.2016

2. HISTORICAL BACKGROUND
10/7/2016Introduction to CISA
2

3. TERMINOLOGY
 What is an Audit
 A review of the past
 Presenting the evidence seen
 Who is an Auditor
 The qualified person(s) skilled with
the right set of skills to evaluate
and assess the evidence
10/7/2016Introduction to CISA
3

4. FOR WHAT PURPOSE?
 The Auditor Audits the Auditee. At some point in
time the Audit team will begin to evaluate and
assess the financial performance of the
company. Over a defined period of time.
 The Auditor(s) are independent
They can produce an unbiased
representation of Auditees financial
statements.
It should contain high assurance of truth,
and a true representation of Auditee’s
financial stance.
Assurance of compliancy with the legal
norms and standards, for the attention of
Share holders.
10/7/2016Introduction to CISA
4

5. JUSTIFICATION OF IT AUDIT
10/7/2016Introduction to CISA
5

6. ITALY’S PARMELAT 2003
 The executives admitted an account in Cayman
Islands holding 4B € was non-existent.
The company was worth 14B € and it
collapsed
In addition four Banks were indicted
10/7/2016Introduction to CISA
6

7. ADELPHIA
COMMUNICATION 2002
 The CEO and Son were found Guilty of two
counts of Fraud
 They misrepresented $1.6B of assets in Balance
sheet
 Stole $51M
The company collapsed
Eventually Comcast & Time warner
Purchased it
10/7/2016Introduction to CISA
7

8. AIG GROUP
 The CFO bloated the income by $3.9B
 Silence the analysts who were concerned about
the decline in reserves
Company had to pay $1.6 B in
damages
10/7/2016Introduction to CISA
8

9. ARTHUR ANDERSON
(AUDITORS) &
ENRON (AUDITEE)
 The CEO ordered staff to shred documents to
obstruct Enron being investigated
Conviction for executives of both
companies
Enron board was convicted of running
the largest scam off Balance sheet in
the world
10/7/2016Introduction to CISA
9

10. WORLDCOM
 The CEO filed false reports concerning $11B
accounting fraud.
 The CFO testified against the CEO
 The controller admitted he ordered staff to
create Billions $ in adjustment to help rise stock
values worldwide.
The CEO ended up convicted to serve
a 25 years Sentence
This created SARBANES OXLEY ACT
of 2002
10/7/2016Introduction to CISA
10

11. ALL IN ALL MORE THAN 1000 SUCCESSFUL CORPORATE CONVICTIONS TOOK
PLACE BY THE US SECURITIES AND EXCHANGE FROM 2002 TO 2005
 92 corporate Presidents
 14 COO
 98 Vice Presidents
 86 CEOs
 40 CFOs
 17 Attorney lawyers serving as Council
10/7/2016Introduction to CISA
11

12. WHAT DID THESE MEAN
FOR BUSINESSES
 Business world leaders were forced into a
control frenzy and this lead to the Creation of
various acts
 SOX
 HIPPA
 FISMA
 SCADA
 FFIEC
 PCI
 Basel lI
Focus was on understanding IT
systems, operational integrity, Internal
controls all of them to protect assets.
Known as Regulatory controls
So why all these regulations
10/7/2016Introduction to CISA
12

13. BECAUSE WE HAVE TO MAKE SURE THE EXECUTIVES ARE
HELD ACCOUNTABLE FOR THE ACCURACY OF FINANCIAL
REPORTS AND DATA PRESENTED TO SHARE HOLDERS
 The Business Requirement dictates
 Evidence of Business Integrity
 Evidence of Internal Controls to Protect Valuable assets
10/7/2016Introduction to CISA
13

14. SO WHAT NEXT…
 Introduction to financial concepts
 Continuation of CISA audit processes
 IT Governance
 Information Asset Protection
 Disaster Recovery and Business continuity from
CISA point of view
Please advise …….
10/7/2016Introduction to CISA
14