Expected NIST-COBIT-2019 Exam Topics, as suggested by Isaca :

• Module 1: Overview of the Cybersecurity Framework: This section of the exam measures the skills of NIST Cybersecurity Professionals and covers fundamental concepts of the cybersecurity framework. It explores the framework’s core principles, components, and evolution while emphasizing its significance in modern cybersecurity practices.
• Module 2: Cybersecurity Framework Structure: This section of the exam measures the skills of NIST Cybersecurity Professionals and covers the cybersecurity framework’s detailed architectural components and organizational elements. It delves into the framework’s core functions, categories, and subcategories, examining how these components interrelate to create a comprehensive security approach.
• Module 3: Framework Implementation: This section of the exam measures the skills of NIST Cybersecurity Professionals in deploying and maintaining the cybersecurity framework within organizations. It focuses on the methodologies, tools, and best practices required for successful framework adoption.

Expected IT Risk Fundamentals Exam Topics, as suggested by Isaca :

• Module 1: Risk Intro and Overview: This section of the exam measures the skills of risk management professionals and provides a foundational understanding of risk concepts, including definitions, significance, and the role of risk management in achieving organizational objectives.
• Module 2: Risk Governance and Management: This domain targets risk management professionals who establish and oversee risk governance frameworks. It covers the structures, policies, and processes necessary for effective governance of risk within an organization. Candidates will learn about the roles and responsibilities of key stakeholders in the risk management process, as well as best practices for aligning risk governance with organizational goals and regulatory requirements.
• Module 3: Risk Identification: This section focuses on recognizing potential risks within IT systems. It explores various techniques for identifying risks, including threats, vulnerabilities, and other factors that could impact organizational operations.
• Module 4: Risk Assessment and Analysis: This topic evaluates identified risks. Candidates will learn how to prioritize risks based on their assessments, which is essential for making informed decisions regarding mitigation strategies.
• Module 5: Risk Response: This section measures the skills of risk management professionals tasked with formulating strategies to address identified risks. It covers various approaches for responding to risks, including avoidance, mitigation, transfer, and acceptance strategies.
• Module 6: Risk Monitoring, Reporting, and Communication: This domain targets tracking and communicating risk information within organizations. It focuses on best practices for monitoring ongoing risks, reporting findings to stakeholders, and ensuring effective communication throughout the organization.

Expected CRISC Exam Topics, as suggested by Isaca :

• Module 1: IT Risk Identification/ IT Risk Assessment
• Module 2: Risk Response and Mitigation
• Module 3: Risk and Control Monitoring and Reporting
• Module 4: Definitions and Objectives for the Four Areas
• Module 5: Task and Knowledge Statements
• Module 6: Confirms One’s Ability To Recognize And Gauge Threats And Vulnerabilities To The Organization’s People, Processes And Technology.
• Module 7: Attests To Advanced Skill In Identifying The Current State Of Existing Controls And Evaluating Their Effectiveness For It Risk Mitigation.
• Module 8: Tests Your Ability To Select And Implement Informed Risk Decisions That Are Well-Aligned And Enunciated Throughout The Organization.
• Module 9: Assesses Your Ability To Define And Establish Key Risk Indicators (Kris) And Thresholds Based On Available Data, To Enable Monitoring Of Changes In Risk. Self-Assessment Questions, Answers and Explanations
• Module 10: Suggested Resources For Further Study

Expected COBIT5 Exam Topics, as suggested by Isaca :

• Module 1: Business framework for the governance and management of enterprise IT
• Module 2: Effective framework to enable business value/ Obtaining foundation-level knowledge
• Module 3: How IT Management Issues Are Affecting Organizations
• Module 4: The Need For An Effective Framework To Govern And Manage Enterprise IT
• Module 5: How COBIT Meets The Requirement For An IT Governance Framework
• Module 6: How COBIT Is Used With Other Standards And Best Practices
• Module 7: The Functions That COBIT Provides And The Benefits Of Using COBIT
• Module 8: The COBIT Framework And All The Components Of COBIT
• Module 9: How To Apply COBIT In A Practical Situation

Expected COBIT-Design-and-Implementation Exam Topics, as suggested by Isaca :

• Module 1: Governance Implementation Lifecycle: In this section, the focus is on assessing the capabilities of IT governance professionals and senior managers in implementing and managing the complex world of enterprise technology governance. They will showcase their comprehensive understanding of the full lifecycle, encompassing planning, design, execution, monitoring, and enhancement of robust governance systems. Their expertise in aligning these systems with strategic objectives is key.
• Module 2: The Governance System Design Workflow: The exam zeroes in on IT architects, designers, and consultants as the primary audience. This section evaluates their prowess in crafting effective governance systems. These professionals will exhibit their talent for creating streamlined workflow processes, defining clear governance structures, and customizing governance frameworks to perfectly suit the unique needs of their organizations.
• Module 3: Design Factors for a Governance System: This domain targets IT strategists, enterprise architects, and governance advisors. It assesses their keen ability to identify and dissect critical design factors that hold significant influence over the development and deployment of a thriving governance system. Their expertise ensures the system is tailored to the organization’s distinct requirements.
• Module 4: COBIT Basic Concepts: IT professionals, managers, and those immersed in governance practices will encounter this section, which tests their grasp of COBIT fundamentals. This includes understanding the Control Objectives for Information and Related Technologies framework, along with the core principles that guide effective governance of enterprise IT.
• Module 5: Implementing & Optimizing I&T Governance Overview: Senior IT leaders, governance directors, and consultants step into the spotlight here. The exam assesses their profound expertise in establishing and refining IT governance practices across the entire enterprise landscape. Their proficiency in ensuring strategic alignment, facilitating sound decision-making, and maximizing value is vital.
• Module 6: Impact of Design Factors: Management consultants, IT strategists, and governance specialists take center stage as they delve into understanding the far-reaching impact of design factors. They assess how these factors influence the effectiveness of governance systems, processes, and the attainment of strategic objectives. Their insight ensures the optimization of governance practices.
• Module 7: Key Topics Decision Matrix: IT governance analysts, advisors, and consultants showcase their proficiency in employing a decision matrix as a tool. They exhibit their skill in evaluating and prioritizing key topics, making well-informed choices that ultimately enhance the implementation and ongoing improvement of robust governance systems.

Expected CISM Exam Topics, as suggested by Isaca :

• Module 1: Information Security Management/ Identity Management
• Module 2: Information Network Security Management Expectaions
• Module 3: Information Security Governance
• Module 4: InformationRisk Management
• Module 5: Information Security Program
• Module 6: Development and Management
• Module 7: Information Security Incident Management

Expected CISA Exam Topics, as suggested by Isaca :

• Module 1: Information System Auditing Process
• Module 2: Governance and Management of IT
• Module 3: Information Systems Acquisition, Development and implementation
• Module 4: Information Systems Operations and Business Resilience
• Module 5: Protection of Information Assets
• Module 6: Confirms To Stakeholders Your Abilities To Identify Critical Issues
• Module 7: Affirms Your Credibility To Offer Conclusions On The State Of An Organization’s IS/IT Security, Risk And Control Solutions
• Module 8: Offer Proof Not Only Of Your Competency In IT Controls But Also Your Understanding Of How IT Relates To Business
• Module 9: Recommend Enterprise Specific Practices To Support And Safeguard The Governance Of Information And Related Technologies

Expected CGEIT Exam Topics, as suggested by Isaca :

• Module 1: Promotes the unique qualifications and expertise that ISACA certifications provide
• Module 2: Protects the integrity of the certifications and provides legal defensibility
• Module 3: Facilitates mobility across borders or industries
• Module 4: Authenticates The Ability To Facilitate The Achievement Of Enterprise Goals
• Module 5: Objectives In Order To Create Stakeholder Value While Optimizing Resources
• Module 6: Vital Toward Ensuring Legal And Regulatory Compliance Requirements Are Addressed Through It Risk Management
• Module 7: Affirms Your Aptitude For Seeing That Appropriate Policies And Procedures
• Module 8: Support It And Enterprise Strategic Alignment
• Module 9: Establishes That You Know How To Put Processes Are In Place To Identify
• Module 10: Acquire And Maintain It Resources And Capabilities
• Module11: Firmly Establishes The Expertise To See That It-Enabled Investments Are Managed As A Portfolio Of Investments