Weekend batches
October 2026
09:00–15:00 · flexible hours
$799per learner
24 Oct 2026
4 of 25 seats available
31 Oct 2026
10 of 25 seats available
IT Security and Governance
Certified Information Systems Auditor (CISA®) Certification in Kenya
Advance your career with CISA Certification Training in Kenya. Develop expertise in information systems auditing, IT governance, risk management, internal controls, and cybersecurity. Learn through expert-led sessions, practical case studies, and exam-focused preparation. Strengthen your auditing skills, understand compliance requirements, evaluate IT controls, and prepare to pursue professional opportunities in information systems auditing, assurance, governance, and risk management.
40 Hours/5 daysAdvanced3.9 · 2,356 reviews
Training calendar
Upcoming four-month course schedule
A new weekday and weekend batch starts every week. Each batch runs for 5 training days, based on the course duration of 40 Hours/5 days.
Weekend batches
November 2026
09:00–15:00 · flexible hours
$799per learner
07 Nov 2026
25 of 25 seats available
14 Nov 2026
25 of 25 seats available
21 Nov 2026
25 of 25 seats available
28 Nov 2026
25 of 25 seats available
Weekend batches
December 2026
09:00–15:00 · flexible hours
$799per learner
05 Dec 2026
25 of 25 seats available
12 Dec 2026
25 of 25 seats available
19 Dec 2026
25 of 25 seats available
26 Dec 2026
25 of 25 seats available
Weekend batches
January 2027
09:00–15:00 · flexible hours
$799per learner
02 Jan 2027
25 of 25 seats available
09 Jan 2027
25 of 25 seats available
16 Jan 2027
25 of 25 seats available
23 Jan 2027
25 of 25 seats available
30 Jan 2027
25 of 25 seats available
Course curriculum
What you’ll learn
40 Hours/5 daysAdvanced
Module 1: Information Systems Auditing Process
Audit Planning and Risk-Based Auditing
- Understand audit planning, objectives, scope, and risk-based audit methodologies.
- Identify business risks and prioritize audit activities based on organizational requirements.
Audit Execution and Evidence Collection
- Learn audit testing techniques, evidence collection, sampling, and documentation.
- Evaluate audit evidence to support findings and conclusions.
Audit Reporting and Follow-Up
- Prepare audit reports and communicate findings to relevant stakeholders.
- Recommend corrective actions and monitor the implementation of audit recommendations.
Module 2: Governance and Management of IT
IT Governance Frameworks
- Understand IT governance structures, policies, roles, and responsibilities.
- Evaluate how IT strategies align with organizational goals.
IT Strategy and Resource Management
- Assess IT investments, resource allocation, performance management, and business alignment.
- Understand IT service management, organizational structures, and technology planning.
Risk Management and Compliance
- Evaluate enterprise IT risk management practices and compliance requirements.
- Review policies, standards, and controls supporting effective IT governance.
Module 3: Information Systems Acquisition, Development and Implementation
Project Governance and Management
- Understand project planning, business cases, feasibility assessments, and project governance.
- Evaluate project risks, controls, and stakeholder responsibilities.
Systems Development and Acquisition
- Learn systems development life cycle concepts and software acquisition practices.
- Review requirements management, system design, testing, and quality assurance.
Implementation and Post-Implementation Review
- Assess system migration, user acceptance testing, implementation controls, and deployment readiness.
- Evaluate whether implemented systems meet business objectives and control requirements.
Module 4: Information Systems Operations and Business Resilience
IT Operations and Service Management
- Understand IT operations, service delivery, infrastructure management, and operational controls.
- Assess system performance, availability, incident management, and change management.
Business Continuity and Disaster Recovery
- Learn business impact analysis, business continuity planning, and disaster recovery strategies.
- Evaluate recovery procedures and organizational resilience capabilities.
IT Asset and Performance Management
- Review IT asset management, capacity planning, performance monitoring, and operational reporting.
- Identify opportunities to improve reliability, efficiency, and service continuity.
Module 5: Protection of Information Assets
Information Security Governance
- Understand information security policies, standards, and organizational responsibilities.
- Evaluate security governance practices and alignment with business objectives.
Security Controls and Risk Assessment
- Assess access controls, identity management, authentication, and authorization mechanisms.
- Identify security weaknesses and recommend risk mitigation measures.
Security Monitoring and Incident Management
- Understand security monitoring, incident response, vulnerability management, and threat mitigation.
- Evaluate procedures for protecting sensitive information and maintaining security evidence.
Data Protection and Privacy
- Review data classification, encryption, privacy controls, and secure information handling.
- Assess safeguards for information confidentiality, integrity, and availability.
Module 6: CISA Exam Preparation and Practice
CISA Exam Structure and Domain Review
- Review the five CISA exam domains and their key learning objectives.
- Identify knowledge gaps and prioritize revision activities.
Practice Questions and Case-Based Learning
- Solve exam-style questions covering auditing, governance, systems implementation, operations, and information security.
- Discuss question analysis and the reasoning behind the best answers.
Mock Assessments and Final Revision
- Complete practice assessments to evaluate readiness and identify improvement areas.
- Review challenging concepts, exam strategies, and time-management techniques.
Entry requirements and prerequisites
Educational Background: A degree in information technology, computer science, accounting, finance, or a related field is helpful for learners enrolling in CISA Certification Training in , .
IT and Auditing Knowledge: Basic knowledge of information systems, IT controls, auditing principles, risk management, and cybersecurity is recommended.
Professional Experience: Practical experience in IT auditing, information systems, security, governance, or risk management can help learners understand CISA concepts more effectively.
Understanding of Business Processes: Familiarity with business operations, internal controls, compliance requirements, and organizational risk is beneficial.
Analytical Skills: The ability to evaluate IT processes, identify control weaknesses, assess risks, and document audit findings supports successful learning.
Certification Experience Requirements: Candidates planning to earn the CISA certification should review ISACA’s professional experience requirements. Passing the exam alone does not automatically grant the certification.
Exam Preparation: No specific prior certification is required to begin preparation. Learners in , can strengthen their understanding through structured CISA exam preparation and practice questions.
Commitment to Learning: Candidates should be prepared to study information systems auditing, governance, IT controls, systems implementation, operations, business resilience, and information asset protection.
Career value
Reasons to choose this course
Advance Your IT Auditing Career
CISA Certification Training in , helps you develop expertise in information systems auditing, internal controls, and IT assurance. Build knowledge relevant to IT auditor and information systems auditor roles.
Strengthen IT Governance Knowledge
Learn how to evaluate IT governance structures, business processes, and organizational controls. Develop skills to assess whether IT systems support business objectives and compliance requirements.
Improve Risk Assessment Skills
Understand how to identify control weaknesses, assess information systems risks, and recommend corrective actions. Apply these skills to support risk management and audit decision-making.
Develop Cybersecurity and Control Expertise
Learn how to assess information asset protection, security controls, and technology-related risks. Strengthen your understanding of protecting organizational information and systems.
Expand Professional Opportunities
Prepare for career paths such as IT Auditor, Information Systems Auditor, IT Risk Analyst, IT Compliance Analyst, and IT Assurance Consultant. Opportunities depend on experience and employer requirements.
Prepare for CISA Certification
Follow a structured learning path with domain-based revision, practical case studies, and exam-focused preparation. Build confidence in applying CISA concepts to professional scenarios and certification questions.
Advantages
Turn learning into practical capability
Long-Term Career Development
Build relevant knowledge for IT auditing, IT assurance, governance, risk, and compliance career paths. Combine CISA preparation with practical experience and continuing professional development to support career progression.
Industry-Recognized Professional Credential
Prepare for the ISACA CISA certification to demonstrate knowledge of information systems auditing, control, and security. The credential can support professional credibility in audit and assurance roles.
Comprehensive Audit Process Knowledge
Understand audit planning, evidence collection, testing, reporting, and follow-up activities. Learn how to evaluate information systems controls and document audit findings effectively.
Better IT Risk and Compliance Understanding
Explore risk assessment, regulatory compliance, internal controls, and governance practices. Develop the knowledge to identify gaps and recommend appropriate improvements.
Practical Business Applications
Apply CISA concepts to scenarios involving financial services, healthcare, manufacturing, and IT services. Learn how auditing practices can help improve system reliability, accountability, and operational resilience.
Structured Exam Preparation
Review the five CISA exam domains through guided lessons, practice questions, and revision activities. Build familiarity with exam topics and strengthen your readiness for the certification assessment.
Exam format & assessment
- Certification Name: Certified Information Systems Auditor (CISA®).
- Certification Body: ISACA.
- Exam Format: Computer-based examination consisting of multiple-choice questions.
- Number of Questions: 150 questions.
- Exam Duration: 4 hours.
- Exam Domains: Five domains covering information systems auditing, IT governance, systems acquisition and implementation, IT operations and business resilience, and protection of information assets.
- Passing Score: 450 on a scaled score range of 200–800.
- Exam Delivery: Through authorized testing arrangements, subject to current ISACA availability and policies.
- Exam Language: English and other languages offered by ISACA, depending on current exam availability.
- Certification Eligibility: Candidates must meet ISACA’s professional experience requirements to earn the CISA certification.
- Exam Fee: Typically US$575 for ISACA members and US$760 for non-members, subject to change.
- Application Fee: A separate certification application fee may apply.
- Preparation Support: StepMerit Learning training may include domain-based revision, practice questions, mock assessments, and exam-focused guidance.
Bring your learning together
Course conclusion
CISA Certification Training by StepMerit Learning helps professionals develop essential knowledge of information systems auditing, IT governance, risk management, internal controls, and information security. Through structured learning, practical case studies, and exam preparation, learners can strengthen their ability to evaluate IT controls, identify risks, and support effective audit practices.
Whether you are an IT auditor, risk professional, compliance specialist, or experienced technology professional, CISA training can help you prepare for the certification exam and pursue career opportunities in IT auditing, information systems assurance, governance, risk, and compliance. With focused preparation and relevant professional experience, you can work toward building a stronger career profile in information systems auditing in , .
Target audience
- IT Auditors
- IT Governance Professionals
- Risk and Compliance Professionals
- Cybersecurity Professionals
- Insurance Industry Professionals
- IT Managers and Information Systems Professionals
Verified learning evidence
Expertise, recognition and learner outcomes
Course-specific expertise
Professional Experience: 10 years of training experience in information systems auditing, IT controls, governance, risk assessment, compliance, and security auditing.
Training Hours Delivered: Approximately 1,500–2,500 hours of training delivered to professionals preparing for IT auditing, information systems assurance, risk management, and compliance roles.
Candidates Trained: Approximately 300–600 candidates trained in CISA concepts, IT audit methodologies, governance frameworks, internal controls, and information security.
Industry Training Experience: Exposure to training scenarios across banking and financial services, insurance, healthcare, manufacturing, telecommunications, IT services, and consulting.
Information Systems Auditing Expertise: Guides learners through audit planning, risk-based auditing, evidence collection, control testing, audit documentation, reporting, and follow-up procedures.
IT Governance and Risk Management: Explains IT governance frameworks, organizational risk assessment, regulatory compliance, internal controls, and alignment between IT and business objectives.
Insurance Industry Use Cases: Helps learners understand audits of insurance policy administration systems, claims processing, customer data protection, access controls, and business continuity procedures.
Systems Implementation and Operations: Covers auditing of system acquisitions, software implementations, IT operations, change management, backup procedures, disaster recovery, and service continuity.
Information Security and Data Protection: Provides practical guidance on evaluating access controls, information asset protection, security monitoring, privacy safeguards, and incident response.
Exam Preparation Expertise: Supports learners through domain-based revision, practice questions, mock assessments, and explanations of CISA exam concepts.
Practical Training Methodology: Uses industry scenarios, audit case studies, risk registers, control assessment exercises, evidence documentation, and sample audit reports to connect learning with workplace requirements.
Professional Audience: Training may be tailored to IT auditors, information systems auditors, risk analysts, compliance professionals, cybersecurity specialists, and IT managers.
Documented learner outcomes
Problem Statement – An insurance company faces challenges auditing policy administration systems, claims processing, customer data protection, regulatory compliance, and IT controls.
How We Overcame the Problem – Learners applied CISA auditing principles to assess insurance IT systems, identify control gaps, evaluate risks, and recommend improvements.
Overall Implementation – Learners implemented an audit workflow covering audit planning → risk assessment → control testing → evidence collection → findings → reporting → corrective actions.
Information Systems Auditing – Learners reviewed insurance systems and assessed audit scope, objectives, evidence, and control effectiveness.
IT Governance and Risk Management – Learners evaluated IT policies, governance processes, regulatory obligations, and technology risks affecting insurance operations.
Systems Acquisition and Implementation – Learners assessed controls in new insurance platforms, policy management applications, and claims processing system upgrades.
IT Operations and Business Resilience – Learners evaluated system availability, claims processing continuity, backup procedures, disaster recovery, and incident management.
Information Asset Protection – Learners assessed access controls, customer data security, privacy safeguards, and protection of sensitive insurance records.
Claims Processing Audit – Learners examined claims workflows to identify unauthorized changes, processing errors, weak approvals, and control deficiencies.
Risk Assessment and Control Testing – Learners identified risks such as data breaches, fraudulent transactions, system downtime, and unauthorized access, then evaluated related controls.
Audit Reporting – Learners documented findings, assessed control weaknesses, and recommended corrective actions to improve compliance and operational effectiveness.
Evidence of Learning – Learners prepared audit plans, risk assessments, control-testing records, evidence documentation, audit reports, and remediation recommendations.
Overall Learner Outcome – Learners demonstrated the ability to evaluate insurance IT systems, assess risks and controls, protect customer information, review business continuity, and recommend improvements using CISA auditing principles.
Helpful answers for planning your training
Frequently asked questions
The course covers the information systems auditing process, governance and management of IT, systems acquisition and implementation, IT operations and business resilience, and protection of information assets.
The CISA exam has traditionally consisted of 150 multiple-choice questions completed within four hours. Candidates should confirm the latest format and policies on the official ISACA website.
Learner reviews
Rated by 2,356 learners
Rating and review totals are controlled per course in the CRM.
3.9out of 5
Popular cities in Kenya
Compare city information, course curriculum, exam details and ways to enquire.
Book with clarity
Clear pricing, protected approval and learner support
Approval before payment
A secure payment link is shared only after the CRM team confirms the request.
Live instructor-led delivery
Ask questions during the session and learn alongside a scheduled cohort.
Verified learner feedback
Published course feedback is linked to completed learner records and CRM approval.
Visible schedules
Review weekday and weekend dates, duration, timezone and seat availability before booking.