Podcasts · Education · Technology

Certified: The ISACA CISA Audio Course

Dr Jason Edwards

106 episodes · in order

The Bare Metal Cyber CISA Audio Course is your complete, exam-focused companion for mastering the Certified Information Systems Auditor (CISA) certification. Designed for IT auditors, security professionals, and governance specialists, this comprehensive Audio Course transforms the ISACA exam blueprint into over one hundred clear, structured, and engaging episodes. Each lesson delivers practical explanations and real-world context across all five CISA domains—ranging from audit processes and IT governance to systems acquisition, operations, resilience, and information asset protection. Whether you’re driving, exercising, or studying between work sessions, every episode helps you understand key audit principles, retain critical terminology, and apply your knowledge with confidence.

More about the show

The CISA certification from ISACA is a globally recognized credential that validates expertise in auditing, control, and assurance of information systems. It focuses on evaluating the effectiveness of IT governance, managing risk, ensuring system integrity, and maintaining operational resilience within complex technology environments. Earning the CISA demonstrates that you have the analytical insight and professional judgment to assess vulnerabilities, design controls, and safeguard enterprise systems. Recognized by organizations worldwide, it is a trusted benchmark for IT auditors, compliance officers, and security leaders seeking to advance into higher-responsibility roles in governance and assurance.

Developed by BareMetalCyber.com, the CISA Audio Course combines professional narration, exam alignment, and practical application to give you a complete, portable study experience. Each episode builds momentum toward certification success—helping you not only pass the exam but also elevate your understanding of how effective information systems auditing strengthens organizations.

Episodes page 1 of 3

  1. Episode 1: Welcome to the CISA Certification

    · 15 min · Episode 1

    Start your CISA journey with a clear understanding of what the certification is, why it matters, and how it can transform your career in IT audit. This episode introduces the exam's structure, the benefits of…

  2. Episode 2: Understanding ISACA and Key Resources

    · 16 min · Episode 2

    In this episode, we explore ISACA—the organization behind the CISA—and the essential study tools it provides. You'll learn how to use the official review manual, question database, and support resources to build a…

  3. Episode 3: Proven Strategies for Passing the CISA Exam

    · 16 min · Episode 3

    Get equipped with practical, actionable study strategies to tackle the CISA exam with confidence. This episode covers planning, retention techniques, practice question usage, and how to identify your weak spots before…

  4. Episode 4: Critical Exam Tips, Test-taking Strategies, and Common Pitfalls

    · 15 min · Episode 4

    Learn how to avoid the most common CISA exam mistakes and apply time-tested test-taking strategies. From managing time to breaking down tricky questions, this episode is designed to help you stay sharp, focused, and in…

  5. Episode 5: Final Review – Summary of Key Concepts Across All Domains

    · 18 min · Episode 5

    This episode gives you a high-level review of the most tested concepts across all five CISA domains. If you need a solid refresh or want to verify that your prep is on track, this targeted summary reinforces what you…

  6. Episode 6: Exam-Day Preparation – What to Expect and How to Prepare Mentally

    · 16 min · Episode 6

    Exam day can be stressful, but it doesn’t have to be. This episode walks you through everything from logistics and ID requirements to mental strategies and pacing, so you're ready to perform at your best. Ready to…

  7. Episode 7: Overview of Domain 1 – Information Systems Auditing Process

    · 18 min · Episode 7

    Domain 1 is the foundation of the CISA exam. In this episode, we break down what IS auditing means, how it fits into the bigger picture of IT governance, and what the exam expects you to understand about audit roles,…

  8. Episode 8: IS Audit Standards, Guidelines, and Codes of Ethics

    · 18 min · Episode 8

    Know the rules before you’re tested on them. This episode covers the ISACA audit standards and ethics you’ll need to master for Domain 1. You’ll learn what to memorize, how these principles shape audits, and why they…

  9. Episode 9: Types of Audits, Assessments, and Reviews

    · 18 min · Episode 9

    Not all audits are the same. This episode teaches you how to distinguish between audit types—compliance, financial, operational, and more—so you can answer CISA questions with clarity. Learn the nuances that the exam…

  10. Episode 10: Fundamentals of Risk-Based Audit Planning

    · 18 min · Episode 10

    Risk-based planning is at the core of IT auditing and a major theme on the CISA exam. This episode covers how to prioritize audits, identify risks, and design audit scopes that align with business impact—all framed for…

  11. Episode 11: Advanced Risk Assessment Methods and Practical Examples

    · 17 min · Episode 11

    Understanding risk is a cornerstone of the CISA exam, and this episode takes you beyond the basics. You’ll explore advanced techniques such as scenario-based analysis, quantitative vs. qualitative risk scoring, and how…

  12. Episode 12: Types of Controls and Audit Considerations

    · 19 min · Episode 12

    The CISA exam tests your ability to evaluate and differentiate between control types—preventive, detective, corrective, and compensating. This episode breaks down each control category, explains when and how they’re…

  13. Episode 13: Audit Project Management

    · 18 min · Episode 13

    CISA candidates must not only understand audits—they must also understand how to manage them. This episode outlines the core principles of audit project management, including setting timelines, assigning resources,…

  14. Episode 14: Audit Testing and Sampling Methodology

    · 18 min · Episode 14

    Sampling is a heavily tested concept, and many CISA candidates struggle to distinguish between statistical and judgmental sampling. This episode demystifies sampling strategy, explains how to choose the right sample…

  15. Episode 15: Audit Evidence Collection Techniques

    · 18 min · Episode 15

    Effective audits rely on strong, defensible evidence. In this episode, we explore how to gather evidence using inquiry, observation, inspection, and re-performance. You'll learn how to assess evidence sufficiency,…

  16. Episode 16: Introduction to Audit Data Analytics Tools and Techniques

    · 19 min · Episode 16

    Modern audits demand more than checklists—they require smart use of data. This episode introduces audit data analytics, explains the types of analytics (descriptive, diagnostic, predictive), and outlines how tools like…

  17. Episode 17: Practical Applications and Case Studies of Audit Data Analytics

    · 19 min · Episode 17

    To truly master data analytics, you need to see it in action. This episode presents real-world examples and case studies showing how data analytics is used in fraud detection, operational audits, and compliance…

  18. Episode 18: Audit Reporting and Communication Techniques

    · 20 min · Episode 18

    Communicating audit results effectively is critical for both real-world auditors and CISA exam success. This episode teaches you how to write clear findings, structure reports logically, and deliver recommendations…

  19. Episode 19: Quality Assurance and Improvement of Audit Processes

    · 37 min · Episode 19

    ISACA expects CISA-certified professionals to uphold audit quality through structured QA practices. In this episode, we explore internal reviews, peer assessments, and continuous improvement models that strengthen the…

  20. Episode 20: Overview of Domain 2 – Governance of IT

    · 18 min · Episode 20

    Domain 2 shifts your focus from audit execution to how IT supports business objectives. This episode provides a strategic overview of IT governance principles, roles and responsibilities, and how auditors assess the…

  21. Episode 21: Overview of Domain 2 – Management of IT

    · 15 min · Episode 21

    Domain 2 doesn’t stop at governance—it also expects you to understand IT management practices. This episode introduces the key responsibilities of IT leaders, including resource allocation, vendor oversight,…

  22. Episode 22: Laws, Regulations, and Industry Standards

    · 16 min · Episode 22

    The CISA exam expects you to recognize and apply legal, regulatory, and industry-specific requirements to audit scenarios. This episode explores major compliance drivers like GDPR, HIPAA, and SOX, and explains how…

  23. Episode 23: Organizational Structure, IT Governance, and IT Strategy

    · 17 min · Episode 23

    A solid grasp of organizational structure is key to evaluating IT governance. This episode walks you through reporting lines, governance committees, roles like CIO and CISO, and how strategy aligns with structure.…

  24. Episode 24: IT Policies, Standards, Procedures, and Practices

    · 16 min · Episode 24

    Policies and standards form the backbone of IT governance, and this episode helps you understand how auditors evaluate their design, communication, and enforcement. You’ll explore the differences between policies,…

  25. Episode 25: Enterprise Architecture and Considerations

    · 16 min · Episode 25

    Enterprise Architecture (EA) connects IT design to business strategy, and the CISA exam wants you to evaluate how well it supports organizational goals. In this episode, you’ll learn the components of EA, including…

  26. Episode 26: ERM Frameworks and Principles

    · 17 min · Episode 26

    Enterprise Risk Management (ERM) is a key pillar of IT governance. This episode explains risk frameworks like COSO ERM and ISO 31000 and shows how auditors evaluate the structure, roles, and processes of ERM programs.…

  27. Episode 27: ERM Implementation and Evaluation Examples

    · 18 min · Episode 27

    Building on the last episode, we now focus on how ERM is implemented and assessed. Through audit-relevant examples, you’ll learn how to evaluate risk ownership, review program maturity, and assess documentation…

  28. Episode 28: Privacy Program and Principles

    · 17 min · Episode 28

    Data privacy is no longer optional—it’s a regulatory and reputational imperative. This episode covers privacy frameworks, laws, and controls auditors must assess during evaluations. You'll also learn how to audit…

  29. Episode 29: Data Governance Program Fundamentals

    · 17 min · Episode 29

    Governance doesn’t stop at systems—it includes data. This episode explores how data is owned, classified, and controlled across the enterprise. You’ll learn how to evaluate governance roles, policies, and procedures…

  30. Episode 30: Practical Data Classification Techniques and Compliance

    · 18 min · Episode 30

    Data classification is a key input to effective security and compliance auditing. In this episode, you’ll learn how to evaluate classification policies, review labeling and access controls, and understand how…

  31. Episode 31: IT Resource Management

    · 17 min · Episode 31

    Resource management is foundational to IT governance, and the CISA exam tests your ability to evaluate how organizations allocate, monitor, and optimize people, hardware, software, and funding. This episode walks you…

  32. Episode 32: IT Vendor Management

    · 18 min · Episode 32

    Managing third-party risk is a key topic on the CISA exam, and this episode dives into how to audit vendor selection, onboarding, performance evaluation, and contract compliance. You'll learn how to assess risk from…

  33. Episode 33: IT Performance Monitoring and Reporting

    · 17 min · Episode 33

    Audit success depends on knowing how to evaluate IT performance. This episode explains how key performance indicators (KPIs) and reports are used to measure service delivery, support governance goals, and drive…

  34. Episode 34: Quality Assurance and Quality Management of IT

    · 17 min · Episode 34

    The CISA exam expects candidates to understand how IT quality is planned, implemented, and improved over time. This episode covers quality assurance policies, continuous improvement practices, metrics, and reviews.…

  35. Episode 35: Overview of Domain 3 – Information Systems Acquisition, Development & Implementation

    · 17 min · Episode 35

    Domain 3 focuses on the controls and governance involved in acquiring and implementing IT solutions. This episode provides a strategic overview of project governance, system development methodologies, and how these…

  36. Episode 36: Project Governance and Management

    · 18 min · Episode 36

    Project governance ensures IT initiatives deliver value and align with business goals. This episode covers how auditors evaluate project oversight, milestone tracking, risk management, and stakeholder involvement.…

  37. Episode 37: Business Case and Feasibility Analysis

    · 19 min · Episode 37

    Before a project begins, auditors must evaluate whether it’s justified. This episode focuses on auditing business case development, feasibility assessments, and benefit realization. You'll learn how to assess whether…

  38. Episode 38: Waterfall and Traditional SDLC

    · 19 min · Episode 38

    Understanding the traditional software development lifecycle is essential for CISA candidates. This episode explains each phase of the waterfall model and the corresponding audit controls. You'll learn how to evaluate…

  39. Episode 39: Agile, DevOps, and Modern SDLC Approaches

    · 18 min · Episode 39

    Agile and DevOps are increasingly popular in IT development, and the CISA exam expects you to understand how to audit these environments. This episode explains how control requirements shift in iterative, fast-paced…

  40. Episode 40: Control Identification and Design

    · 18 min · Episode 40

    Strong control design starts early in the system lifecycle. In this episode, you'll learn how auditors assess whether appropriate controls have been identified and designed during planning, development, and…

  41. Episode 41: System Readiness and Implementation Testing

    · 18 min · Episode 41

    Before a new system goes live, auditors must confirm that it’s ready for production. This episode explains how to evaluate readiness through testing, validation, and stakeholder approvals. You’ll learn how to assess…

  42. Episode 42: Implementation Configuration and Release Management

    · 19 min · Episode 42

    Poor configuration control can lead to outages, vulnerabilities, and audit findings. In this episode, we cover how to evaluate release planning, version control, rollback procedures, and configuration documentation.…

  43. Episode 43: System Migration, Infrastructure Deployment, and Data Conversion

    · 19 min · Episode 43

    CISA candidates must understand the risks and controls involved in moving systems and data. This episode explains how to audit system migrations, infrastructure rollouts, and data conversion processes. You’ll learn how…

  44. Episode 44: Post-Implementation Review

    · 19 min · Episode 44

    Once a system is deployed, the work isn’t over—auditors still need to assess whether objectives were achieved. This episode teaches you how to conduct a post-implementation review, evaluate project outcomes, assess…

  45. Episode 45: Overview of Domain 4 – Information Systems Operations & Business Resilience

    · 18 min · Episode 45

    Domain 4 shifts focus to the reliability and sustainability of IT operations. In this episode, you’ll gain an overview of operational controls, availability, service delivery, incident response, and business…

  46. Episode 46: IT Components

    · 18 min · Episode 46

    Understanding the elements that make up the IT environment is essential for audit readiness. This episode breaks down how to evaluate the hardware, software, network, and data assets that support critical business…

  47. Episode 47: IT Asset Management

    · 17 min · Episode 47

    IT asset management is more than keeping an inventory—it’s about control, accountability, and lifecycle oversight. In this episode, you’ll learn how to audit asset acquisition, tagging, usage, and disposal. We also…

  48. Episode 48: Job Scheduling and Production Process Automation

    · 18 min · Episode 48

    This episode covers how auditors evaluate job scheduling systems, batch processing, and automated task workflows. You’ll learn how to assess controls for error handling, reprocessing, and change approval—all of which…

  49. Episode 49: System Interfaces

    · 19 min · Episode 49

    When systems talk to each other, auditors must ensure that the communication is controlled and secure. This episode explores interface types (manual and automated), error checking, data reconciliation, and exception…

  50. Episode 50: Shadow IT and End-User Computing

    · 18 min · Episode 50

    Shadow IT introduces risk outside the view of central IT. In this episode, you will learn how to identify and audit unauthorized tools, spreadsheets, applications, and systems created by business units. We also cover…

Shows are listed from Apple Podcasts' charts and directory, and Podcast Index where it is used. Every show and episode belongs to its publisher and plays from the publisher's own feed; this site hosts none of them. Explicit shows are for adult profiles only, and children’s profiles hear only children’s shows. More about this list.