ISC lesson sources
Last reviewed
The standards and authorities behind every PocketCPA lesson topic in ISC, Information Systems and Controls. Each page lists the paragraphs its lessons cite.
- Information Systems and Controls Core
- Information Systems: Architecture, the SDLC, and Controls (NIST SP 800-145 for the cloud service and deployment models and more)
- Data Management: Lifecycle, Relational Structure, and Integrity (Relational data model, ACID transaction properties and more)
- Regulations, Standards, and Frameworks: COSO, COBIT, NIST, ISO, and the TSC (COSO Internal Control - Integrated Framework and COSO ERM (2 and more)
- Security: Access Control, Network Defense, Cryptography, and Threats (NIST SP 800-53 Rev. 5 access, boundary and more)
- Confidentiality and Privacy: Regulations, Classification, and Safeguards (AICPA Trust Services Criteria (security common criteria and more)
- Incident Response: The Four-Phase Lifecycle, SP 800-61r3, and Continuity Links (NIST SP 800-61r3 (Incident Response Recommendations and Cons and more)
- Planning and Performing a SOC Engagement (SSAE No. 18 as amended (AT-C 105 and more)
- Reporting on a SOC Engagement (SSAE No. 18 as amended (AT-C 320 and more)