CISA Readiness: Audit Information Systems Like a Professional
Signature Course No. 406 — A Signature AI Socratic Coaching Course.
No experience needed — your coach starts where you are.
A New Kind of Learning
Socratic coaching, delivered by an agentic AI coach.
Not a course you watch. An AI coach you work with.
The Lighthouse Coach begins by discovering how you think about the subject, teaches what is missing, and gives you realistic practice before asking you to prove that you can use it. You may test out of concepts you already understand, while capstones turn the learning into a practical plan, decision, conversation, or other real-world result.
The curriculum is deliberately authored; the AI delivers it through coaching. It is not an AI randomly generating lessons.
A coach that teaches by asking — not by lecturing
The Lighthouse Coach is an AI Socratic coach built on Cognosco Learning's CISA Readiness: Audit Information Systems Like a Professional course, in the Risk, Safety & Compliance category. It does not play videos at you. It holds a conversation: it asks you a question, listens to your answer, names the misconception it hears, affirms what you got right, and asks the next question — the way a great coach works in the room.
Anyone can have an opinion about a system. The auditor is the person who can show the work under the opinion. Walk into any IT organization and ask how its systems are doing and you will get confident, detailed, mostly sincere answers within the minute. None of them is an audit. An audit begins where self-knowledge ends: with the refusal to accept any claim — including your own first impression — until evidence gathered by a stated method either carries it or drops it.
It starts with the stance. An audit is the independent testing of claims against criteria, reported as an opinion whose strength matches the evidence. You will learn independence in both its halves, evidence weighed by sufficiency and appropriateness, and the discipline of the final sentence — a claim about a defined subject, over a defined period, against defined criteria, at reasonable assurance and never absolute.
It works in two movements. First, Module 1 — The Auditor's Craft and the Governed Enterprise — work through Concepts 1–9, finishing with The Change Audit File; then, Module 2 — Assurance Across the Life of a System — work through Concepts 10–18, finishing with Assurance Before the Signature.
Both capstones produce real artifacts — a complete engagement file for one audit of Kelvarra Freight Lines' change process: the plan extract, the control map and test design, the evaluated results, the four-part findings, and the opinion with its follow-up register; and an assurance report across a system replacement and a recovery test: the readiness verdict, the recovery conclusion, the vendor reliance decision, the access findings, and the signed opinion with its limits.
The honesty standard is part of the course. This course promises readiness, never a pass. It teaches ISACA's published job-practice areas at outline level and makes no claim about actual examination items beyond those areas; anything version-sensitive is flagged as verify-current, to be confirmed against the current candidate guide before you book a sitting. And every worked number in the course recomputes from its printed inputs — an auditor's course that will not submit to its own arithmetic has no business teaching anyone else's.
The course is self-paced and always on — roughly 30 minutes per concept, about 9 hours in full, taken in as many sittings as you like. You can type your answers, or talk out loud: the Voice Coach speaks its questions and listens to your spoken replies. Learners who already know the material can test out concept by concept.
CISA Readiness: Audit Information Systems Like a Professional is part of The Lighthouse Signature Series — the online counterpart to the one-day, in-person learning Cognosco Learning has delivered since 2002.
Course Facts
One full concept, coached end to end — free: verify your email and we’ll send you a link to start.
Already enrolled? Enter the course →
Diagnose → Learn & Practice → Prove → Capstone
Every learner moves through the same discipline a Cognosco instructor would insist on in the room.
Diagnose
The Coach starts where the course starts: with the stance. State a system's main unstated claim in one sentence, and the evidence — gathered by whom — that would make you repeat it to a board; walk your first three moves when you are assigned to audit a process you once helped set up; list what you would need to see before a draft's “generally effective” could stand under your name. Every concept opens with three questions that locate where you actually stand, and your answers shape how deeply the Coach works the concept with you. Everyone begins with Module 1 — no skipping the foundations you only think you have.
Learn & Practice
Work each concept in conversation with the Coach — spoken or written — then practice it against realistic situations until it holds up.
Prove
Every concept ends in proof: answer the check cold and demonstrate the skill. Know it already? Test out and take credit immediately.
Capstone
Finish with two capstones — The Change Audit File for Module 1 and Assurance Before the Signature for Module 2 — that pull the whole course together, and earn the certificate.
What You'll Learn
Evidence, sampling, materiality, and the opinion. Every concept returns to the same four questions: what would count as evidence here, how much of it is enough, how big a failure would have to be before it matters, and what opinion the surviving evidence will honestly carry. The operator asks, does it work? The auditor asks a colder question: what do I actually know, how do I know it, and what is it worth?
Module 1 builds the craft. The stance and the running company's standing facts; the audit process from charter to follow-up; a universe ranked by scored risk with materiality set before results; controls classified on three axes and tested by their own logic; samples designed and deviation rates bounded; and governance and management examined from the auditor's seat, closing in findings, the opinion, and follow-up.
Module 2 runs the life of a system. Acquisition, development, and implementation assurance; operations and resilience audited from records and tests; identity, access, networks, encryption, and the physical room; analytics used honestly, vendors brought into scope, the fraud line held; and the standard your signature has to meet when all of it is done.
And it holds its boundary throughout. This course never runs anything — it examines, from the auditor's seat, work that other people run. Running the security program belongs to its own neighboring course; fraud examination to another; the internal audit function itself to a third. In one sentence: this course audits systems.
What you will learn
- Take the auditor's stance — independence, evidence, materiality, and the opinion — and hold it against operator and examiner instincts
- Run the IS audit process end to end: charter, risk-based plan, engagement planning, fieldwork, reporting, and follow-up, in the ISACA standards frame
- Rank an audit universe by risk with arithmetic that recomputes, and set materiality and scope you can defend
- Classify controls exactly — preventive, detective, corrective; manual, automated, and hybrid; general and application — and test each kind by its own logic
- Design sampling and judge evidence: sufficiency, appropriateness, and what a deviation rate does and does not prove
- Audit the governance and management of IT from the auditor's seat — strategy, policy, investment, sourcing, and performance
- Give assurance over acquisition, development, and implementation — requirements, build methods, conversion, go-live, and the review after
- Give assurance over operations and business resilience — service delivery, incidents, backup, recovery, and tested readiness
- Audit the protection of information assets — identity and access, segregation of duties, network and encryption controls, physical and environmental protection, and monitoring
- Use data analytics in audit work honestly, work vendors and cloud services as audit subjects, respect the fraud line, and sign your work under the IS auditor's standard
Everything in the course
- All 18 concepts of CISA Readiness: Audit Information Systems Like a Professional, in 2 modules
- A starting-point check first — the Coach finds where you actually stand before teaching
- Learn, Practice, Prove for every concept — no passive video watching
- A test-out on every concept: prove you know it and move on
- The Voice Coach: talk with the Coach out loud — it speaks, listens, and replies
- A personal Learner Record of your work across the course
- Two capstone exercises: The Change Audit File and Assurance Before the Signature
- A printable session summary whenever you pause
- The Lighthouse Coach completion certificate (Signature Series)
- Your progress is saved as you go — stop anytime, resume where you left off
Built for auditors and the audited alike
Aspiring CISA candidates — IT auditors, internal auditors adding the systems specialty, and security or compliance staff moving into assurance roles — who want readiness built on the real method, not on memorized answers; and practicing auditors, internal, external, or government, who audit systems adjacent to their home ground and want the ISACA frame stated exactly.
IT and security professionals preparing to be audited well — who will sit across the table from IS auditors and want to understand, from inside, what a competent auditor is looking for and why.
Audit managers and committee members — who commission IS audits and must judge whether the work handed to them deserves the weight they are about to put on it. This course assumes working fluency with ordinary IT vocabulary at practitioner level; it assumes no prior audit experience and no prior certification study.
Prefer to learn live and in person? The same material anchors Cognosco's one-day programs — browse the in-person catalog.
Start with The Auditor's Stance
$195 — introductory price. One payment. No subscription, no password to manage.
Here is exactly what happens when you enroll:
- Pay securely with Stripe — you are taken straight into the course
- Create your learner profile and begin the Module 1 starting-point check
- Save the access key you are given — it restores your enrollment on any device
- Learn at your pace; your progress is stored in your browser on your device
For the full voice experience, use Chrome and allow the microphone when asked. Typing your answers works everywhere, all the time. Questions before you enroll? Email hello@cognoscolearning.com.
Before you enroll
What is a Socratic coaching session?
A conversation, not a video. Your coach asks a question; you answer — out loud by voice, or by typing — and the coach responds to what you said: naming the misconception it hears, affirming what you got right, and asking the next question. You advance only when you have mastered each concept, so a finished course means the learning held.
How long does it take — and how long do I have?
About 30 minutes per concept. Learn in sittings of any length; your progress is saved as you go. You have a full year from purchase to finish, and you can revisit and retake within that year.
What does the certificate verify?
That you completed every concept and both capstones of this course. Anyone can confirm a Cognosco certificate online — enter its certificate ID on our verification page.
What if it isn't for me — what are the refunds?
If you have not started, cancel for a full refund within seven days of purchase. Once you have started, there is no cash refund — stop before finishing and we credit the full amount you paid toward any other course in the library (credit valid one year from your original purchase). Once you complete the course, no refund or credit applies.
More Signature Courses are coming
CISA Readiness: Audit Information Systems Like a Professional is Signature Course No. 406. Leave your email and we'll send you news of future Signature Courses and Lighthouse updates as they are announced — nothing else.