Concordia University of Edmonton
Master of Information Systems Assurance Management
Edmonton, Canada
Master degree
DURATION
2 years
LANGUAGES
English
PACE
Full time
APPLICATION DEADLINE
EARLIEST START DATE
Sep 2026
TUITION FEES
CAD 49,159 *
STUDY FORMAT
On-Campus
* total estimated fees
Key Summary
In all sectors of the economy, there is an increasing demand for skilled professionals with expertise in information security, assurance, auditing and governance. The Master of Information Systems Assurance Management (MISAM) meets these needs by providing an in-depth educational format. Students learn both the theory and practice of information systems auditing and assurance, and the role this plays in enterprise and information technology governance. Students are well prepared to enter information systems assurance, audit and governance roles immediately upon graduation, as well as write industry-based certification exams in these areas.
The MISAM program:
- allows students to meet their educational goals in an efficient and timely manner; and,
- enables students who possess a more general IT or business-related degree to focus on the specific knowledge and skills required in the emerging field of information systems assurance.
The program is open to both full- and part-time students.
Objectives
- To understand the process of auditing and have in-depth knowledge of information systems auditing, and a general understanding of financial auditing.
- To gain first-hand experience in conducting risk-based information systems audits and in communicating the results to the enterprise.
- To identify sources of risk for the loss of enterprise information and to develop methods to utilize the financial resources available to mitigate these risks and provide assurance.
- To gain a deep knowledge and appreciation of the role governance plays in the success of public and private sector organizations.
- To understand the role of information systems security in relation to the other business assurance processes in an enterprise.
- To develop a plan for the enterprise to recover from disasters and to test the plan in order to ensure that the plan is ready to be implemented when needed.
- To investigate information systems security incidents and develop and implement solutions to recover or minimize any loss of information.
- To develop an appropriate information security framework for an enterprise, including plans and policies which reflect recognized international standards for implementing security policy (based on identifying stakeholders, security teams and infrastructure, data resource owners, data custodians, and audit methods used to determine compliance).
An In-Demand Profession
The need for information systems and security professionals is growing along with the increasing reliance of businesses and governments on technology. The demand for information systems security and assurance professionals shows no end in sight. Our programs maintain a sharp focus on the needs of employers and changes in the industry. Make information security and assurance your choice and join a growing field.
A Business Focused Program
The Assurance program focuses on the business aspect of IT, and prospective candidates are expected to have a background in both technology and accounting/finance. You may be required to take additional courses as a probationary student in the program if you do not have all of the MISAM prerequisite courses but are otherwise admissible.
- Financial Accounting and Analysis for Information Systems Auditors
- Information Systems Audit I
- Information Systems Audit II
- Research Methods & Communications
- Forensic Accounting and Fraud Examination
- Internal Audit Theory and Application
- Disaster Recovery and Business Continuity
- Governance, Risk and Compliance, and
- one of
- Research track consisting of:
- Research Methods II
- Research Methods III
- or
- Capstone track consisting of:
- Capstone I
- Capstone II
- Research track consisting of:
- Analyze and evaluate the IT strategy, including IT direction, and the processes for the strategy’s development, approval, implementation and maintenance for alignment with the organization’s strategies and outcomes.
- Analyze and apply the principles and theoretical concepts, and frameworks related to information systems auditing.
- Identify and assess various operationally-related risks affecting information systems within an enterprise.
- Evaluate an organization’s IT policies, standards and procedures, and the processes for their development, approval, release/publishing, implementation and maintenance.
- Evaluate an organization’s IT portfolio and resource management for alignment with the organization’s strategies and outcomes.
- Evaluate all phases of enterprise incident response, disaster recovery planning, and business continuity (DR/BC) in order to serve as a member of a DR/BC team.
- Explain various organizational and occupational fraud-related theories, schemes, risks, red flags and prevention/mitigation controls.
- Analyze various accounting cycles, such as revenue, expenditures and cash conversion cycles within an enterprise, in order to be able to correctly identify control gaps.
- Evaluate IT resource management, including investment, prioritization, allocation and use, for alignment with the organization’s strategies and outcomes.
- Apply appropriate Computer-Assisted Audit Technology Tools (CAATTs) tests to identify fraud and information systems security issues.
- Function as part of an internal or external team to develop a risk-based information security framework for an enterprise, including plans and policies in congruence with applicable compliance standards and well-recognized frameworks such as COSO and COBIT.
Graduates from MISAM will work in many areas, including internal audit, external audit, information systems assurance consulting and audit departments of various levels of government. Graduates may also work in risk management and governance. Since the passing of the Sarbanes-Oxley in the United States, the growth of audit, governance and assurance work has grown steadily to meet both the new reporting requirements as well as ensuring enterprise value is maintained and increased.
The MISAM program is a 33-credit 2-year program normally completed in 4 terms (Fall, Winter, Fall, Winter) of 9, 9, 9, and 6 credits, including a research or capstone component, consisting of 10 courses. The capstone track is suitable for students who are gearing themselves for professional careers in information systems audit and assurance. The research track is suitable for students who are gearing themselves for a research career in information systems audit and assurance, including students who may consider pursuing PhD programs in the field.


