ACI Learning Reviews

LeaderQuest provides many learning resources which will undoubtedly allow me to pass the certification. In this particular time through this course, I did NOT leave the course with a strong foundation nor an understanding of where I was lacking.

Again, and additional 2 or 3 days to allow more time for review and examples would be perfect. The test out labs are a poor substitute for in person/hands on instruction.

I had higher expectations. I did walk away with as an assessor, to pull more threads.

I was expecting more details around actual auditing of cybersecurity - how to do it. The last 30 slides gave a 'checklist' of what documents to review. But going into more details, like what to look for, would have been helpful.

None.

As I mentioned, majority of the materials were irrelevant to what I needed.

The course didn't seem geared toward in-charge auditors. There wasn't enough teaching of concepts an in-charge auditor could use. There were too many stories many of which didn't really apply.

I think the course was much too long for what material was being covered. Sections went into a lot of detail about different aspects of IT systems, but had surprisingly little about actually auditing those systems. The order of the sections was sometimes confusing. For example, the course began with a section on source of criteria for IT audits, followed by a section on basic IT terminology and aspects of IT systems. I would have thought it would make sense to lay the groundwork about IT systems and THEN start talking about how to audit them and what to look for. The instructor was friendly, but he tended to go into long anecdotes and back-and-forth exchanges with a person in the physical classroom that ate up a lot of time. There were 3 people physically in the room and around 9 on the virtual session. However, the chat and ask-a-question features were not used by the instructor and the online participants were largely ignored unless we jumped in with a question. Some of the content didn't seem accurate. For example, at one point the instructor had a lengthy back-and-forth with members of the class about random sampling. He insisted that judgmental samples where he selects cases could be as representative as a random sample. This isn't correct, and goes against the whole point of random sampling. He also thought that audits should be completed within 3-4 months. This could be true of internal compliance audits, but is incredibly unlikely for performance audits. Much of the material seemed to assume that participants were using Red Book and doing internal compliance audits. That's fine, but our office is using GAGAS and it was less relevant to us. I'd suggest specifically advertising the course on internal compliance IT auditing if that's the framework being used.

Expectations were more about trends in worlwide IA. The majority of the content was not towards this direction, at least for people who come from big IA teams of developped countries

- the first two days was so boring. - The instructor was giving to much details, to the degree I can't follow. For example, he was talking one hour in one subject and repeating himself without adding any extra value. - I believe the course is not worthy to spend 7-8 hours a day for.