ISACA training: governing, auditing and controlling information security

Technology alone does not secure an organisation. It takes policy, risk management, control and accountability to the board and regulators. With NIS2 and DORA, this carries more and more weight. ISACA is the international professional association for exactly those roles: security managers, IT auditors and risk professionals.

With an ISACA training at OEM you prepare online and at your own pace for the official exam, with 365 days of access.

ISACA certifications by role

• CISM, Certified Information Security Manager: for those who manage information security. Governance, risk management, the security programme and incident management. CISM training €409.
• CISA, Certified Information Systems Auditor: for IT auditors and those who assess IT controls. Audit process, governance, management and protection of information systems. CISA training €409.
• CRISC, Certified in Risk and Information Systems Control: for risk managers. Identifying, assessing and controlling IT risks. CRISC training €409.
• COBIT: the framework for governance and management of IT. COBIT 5 Foundation €179.

Regulation and threats

• NIS2 Directive: €229. What the European NIS2 rules require of management and the organisation, and how to comply.
• Security threat intelligence: €339. Gathering threat information and translating it into measures.

Looking for privacy and GDPR? See compliance and privacy.

Which ISACA certification do you choose?

• You direct security policy or report to the board: CISM.
• You assess whether IT processes and controls work: CISA.
• You map IT risks and advise on controls: CRISC.
• You set up IT governance: COBIT.

Frequently asked questions about ISACA

What work experience do I need?

For CISM and CISA, ISACA requires five years of relevant work experience; for CRISC, three years. You can take the exam earlier and demonstrate the experience within five years afterwards.

CISM or CISSP?

CISM focuses on governing information security. CISSP from ISC2 is broader and more technical. See also the ISC2 trainings.

How do I take the exam?

You schedule the official exam with ISACA and take it online or at a test centre. Feel free to ask Sanne for help with registration.

Can I ask a question outside office hours?

Yes. Sanne, our AI assistant, is available 24/7 via the chat in the bottom right.

Ready to govern information security demonstrably? Choose your training above, or request a quote for your team. See also all security trainings.