其實你也可考 CISA

有關 Certified Information Systems Auditor (CISA) 這認證最多人誤解的是 CISA 只是 Auditor 才有資格考。事實是若你有多年 IT 工作經驗，你便極可能是 qualified candidate。 

讓我們參考:

http://www.isaca.org/Certification/CISA-Certified-Information-Systems-Auditor/How-to-Become-Certified/Pages/default.aspx

祇要閣下從事以下五個 domains的工作便有資格：

Domain 1—The Process of Auditing Information Systems (14%)

Domain 2—Governance and Management of IT (14%)

Domain 3—Information Systems Acquisition, Development and Implementation (19%)

Domain 4—Information Systems Operations, Maintenance and Support (23%)

Domain 5—Protection of Information Assets (30%) 

正如 CISA official web site 中提到：

‘The examination is open to all individuals who have an interest in information systems audit, control and security. All are encouraged to work toward and take the examination.’ 及

‘A minimum of 5 years of professional information systems auditing, control or security work experience (as described in the CISA job practice areas) is required for certification. Substitutions and waivers of such experience, to a maximum of 3 years… ’ 

只須仔細計算工作年份，大家便放心去考吧！ 

最後 CISA 容許先考試，後提供工作証明。若你的經驗未夠，大可先考試合格後，等候數年再申請 certified。