Video

Thank you Peju for this update, which area does IT audit fall under as it was not in the slide

Extremely informative and very helpful!

Starting my learning journey in the GRC space without any background in Cybersecurity. This is the second video I am watching on GRC and I must say you explained this framework in a way that is easy to understand. Thank you

Great stuff

Thanks for the video. So I have a very important question. With NIST CSF, without a community profile, how can you really determine the controls needed for your Target profile??? Or should organizations always look for a community profile to use as baseline? For example, with NIST RMF, I know that I would categorize the system, and based on the High Water mark, I will select my control baseline from 800-53, then tailor if need be. But atleast the categorize process would help me to know the controls or baseline or Target that applies. Moreover, with CIS baselines, I can decide that, perhaps, I want to select IG1, IG2, or IG3, depending on my cyber maturity, and Im confident about which controls those come with. Another example....with NIST 800-171 for instance, which pretty much is prescriptive, I know with Level 2, I have 110 controls to adhere to, so any gap analysis I would perform would be against that. However with NIST CSF, Im still not absolutely sure how we arrive at what the Target Proile is supposed to be. Or are you saying the security personnel can randomly pick what controls they think suit the organization?? I hope you understand my ask.

Hi! Would like to clarify regarding key controls. As you mentioned, failure of key controls could have significant loss for a company. And on the other side, IT Audit evaluates whether only an 'adequate control exists' for actvts such as gathering, storing, processing, and distributing informations. When we talk about failure, all I can think is how it is being implemented at first, and then failed. So does it mean that IT Audit does not evaluate on how control/key control is being implemented, because IT Audit in the very basic is just to oversee if there IS only an adequate control right there (of how effective is that, is that mitigating stated risks, does it have minimum compliance reqs, etc.)? Thanks!

She's awesome ❤

Can you share this ppt?

This is great 👍🏿 thank you. Do you have a video on just IT audit and compliance analyst interview questions and answers?

Wow 👌 👏 thank you Peju, your examples are always on point. Thank you for this.

Another insightful session Thank you

Interesting and educative, Thanks

Great content and delivery! Thanks so much. Will have no choice but to subscribe to your channel. You're a great tutor!❤

what an awesome analysis. will use this in an interview for sure!

AMAZING BREAK DOWN!

peju honestly your the best I like the way you break down the frameworks and give confidence to people listening to you. thank you

bought a drill truck would like to see if you guys can help me with complies to the US Federal Safety standard ..it’s mounted to a international truck the truck is good to go it’s just the drill rig in back and I can’t find who was the manufacturer or who put it on please help me thanks

Great delivery . More of your great works.

Hi Peju,can HR recruiter transfer career in to audit compliance

Hi , I need more training on Diligent High Bond

definitely considering pursuing this

Great job Peju, Thanks

Thank you

Thank you Peju... please share how to apply for job for those of us thay just passed CISA but no exp.. What shoud we apppy for ? Thank you!

helped a lot thank you, need more videos on Application controls giving examples like Edit check, validation etc.

Please do you provide training that I can enroll in

Hi Peju ! I’m looking to enroll in your course but there’s no enroll option in your academy website

Thank you for the informative video. Could you please discuss in further detail the types of testing that are conducted by an IT Auditor. I am coming from a software background. When I think of testing, I think of Quality Control/Assurance testing. I don't believe it's the same in this context. Is there a guide or reference on the method of testing for IT Auditor?

far better explained

Hi Peju. The video is so much helpful. Can you do a video over Diligent tool in deep about all the features like pulling the reports, edits, segregation of projects, how effectively we can set the frameworks and also to edit them. Please it's a request.

Very nice. Tks!

Very informative..A more detailed one would be highly appreciated

Thank you

Brilliant Delivery

Nice one again. Time to time post IT class as well. Too many NIST CSF 2.0 out there. Missing IT Audit session out there that last for 60 minutes and so. Thanks

Grc

Thanks a lot ma’am 🎉 Coming from the 3 days training

What is generally the pay range for this type of career?

Haven gone through some of your CZcams videos, I'm more than persuaded that I'm in the right place where I can create a niche for myself in IT industry

Super peju

I'm in already

I can't wait to get onboard with your mentorship

In fact, you nailed it. I enjoyed the video. Seeing you on April 4th -6th at your workshop.

Your speaking cadence is the absolute perfect pace for providing instruction. Thank you for this video!

Very helpful! Thanks a lot for creating such awesome videos.