Upcoming CISA and CRISC Certification Training Series

If you hold a CISSP or CISM and are wondering about the next steps in your cybersecurity certification journey, ISACA’s CISA (Certified Information Systems Auditor) and CRISC (Certified in Risk and Information Systems Control) are highly recommended. Pete Zerger, vCISO and CISSP, has announced two YouTube training series:
– CISA – Starting mid-July
– CRISC – Launching in September for the new November 2025 exam

To get notified, subscribe to the Inside Cloud & Security YouTube channel.

You Should Know:

1. CISA – Key Focus Areas & Practical Commands
   CISA validates expertise in auditing, monitoring, and assessing IT systems. Below are key Linux and Windows commands for system auditing:

Linux:

 Check user login history 
lastlog

Audit file permissions (find world-writable files) 
find / -type f -perm -o+w -exec ls -l {} \;

Review sudo access 
sudo -l

Check open ports 
ss -tulnp 

Windows (PowerShell):

 List all running processes 
Get-Process

Check installed software 
Get-WmiObject -Class Win32_Product | Select-Object Name, Version

Audit failed login attempts 
Get-EventLog -LogName Security -InstanceId 4625 -Newest 10 

2. CRISC – Risk Management & Compliance

CRISC focuses on risk identification and mitigation. Use these commands to assess vulnerabilities:

Linux (Vulnerability Scanning):

 Scan for outdated packages (Debian/Ubuntu) 
apt list --upgradable

Check for kernel vulnerabilities 
uname -r 

Windows (Risk Assessment):

 Check system for missing patches 
Get-HotFix | Sort-Object InstalledOn -Descending

Export security logs for analysis 
Export-Csv -Path "C:\audit_logs.csv" -InputObject (Get-EventLog -LogName Security) 

What Undercode Say:

• CISA is crucial for IT auditors, requiring hands-on log analysis and compliance checks.
• CRISC demands risk modeling expertise—practice with NIST frameworks and MITRE ATT&CK.
• Automate audits with Python scripts (e.g., parsing logs with pandas).
• For cloud security, master AWS IAM policies and Azure Security Center.

Prediction:

• By 2026, demand for CISA/CRISC-certified professionals will surge by 30% due to stricter global compliance laws (GDPR, CCPA).
• AI-driven audits will integrate with certification curricula, requiring familiarity with ML-based anomaly detection.

Expected Output:

• CISA Series URL: Inside Cloud & Security YouTube
• CRISC Exam Guide: ISACA Official Site

IT/Security Reporter URL:

Reported By: Petezerger Have – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅

Join Our Cyber World:

💬 Whatsapp | 💬 Telegram