Best way to learn IT Audit from zero with a technical background?
Hi everyone, I’m currently working in Technical Support and have a background in networking and cybersecurity. I have CCNA and Security+, and I’m also preparing for ITIL Foundation.
For a few career-related reasons, I’ve decided to move toward IT Audit / Technology Risk and want to learn it properly from zero.
What course or resource would you recommend for learning practical IT Audit, especially ITGC, risk & controls, evidence testing and audit methodology?
Also, should I start directly with ISO 27001, or first learn the fundamentals of IT Audit and then move to those frameworks?
Preferably something beginner-friendly and not only focused on passing CISA.