Dear DISA participant,

Congratulations! on successful completion of the DISA training. We would like to

reiterate the objective of the updated DISA course 2.0 is:

“To provide relevant practical knowledge and skills for planning and performing
various types of assurance or consulting assignments in the areas of Governance,
Risk management, Security, Controls and Compliance in the domain of Information
Systems and in an Information Technology environment by using relevant
standards, frameworks, guidelines and best practices.”

The updated DISA 2.0 course is a blend of e-Learning, class room training, hands on
training and project work. We are sure you have actively participated in the training
and have also gone through the e-learning modules of the course. For being eligible
to write the DISA exam, you have to pass the eligibility test and this includes
submission of project report (20 marks). The objective of project report is to test
understanding and application of knowledge of DISA 2.0 Course as relevant. The
project you need to work on is based on practical scenarios relating to one/more
modules of the DISA course. Please use DISA course learning material, ICAI and
international best practices in preparing the project report.

Specific Guidelines for project report are given below:

1. The project report will be done individually.
2. The specific project/case study will be sent by email by CIT and the project
report for this has to be completed and submitted to CIT within 15 days from
the date of completion of classes.
3. Participants have to work on the specific case study/project allotted to them
and each of the members is expected to actively work for the solution of the
project.
4. Participants will maintain confidentiality of the project. They will not share the
project or take assistance from any others in preparing the project report.
5. The total marks for the project report is 20 marks and is included in the
eligibility test.
6. The project report is to be submitted as follows: soft copy is to be sent by
email.
7. Participants are encouraged to refer to the learning material of DISA course
which includes background material, reference material and e-Learning. The
solution for the project can be prepared based on these materials and there is
no additional research required. However, participants are encouraged to do
additional research and use ICAI and international standards, guidelines and
best practices as required for the project. Please provide specific details of
references used including websites or publications.
8. The allotted case study/project can be updated to include additional data.
However, if specific information of any client data or information is used, this
 data may be sanitised so as not to include reference to any specific
client/company.
9. The project report which is the solution to the project/case study should be
original work of the member. If project report is found to be copied or similar to
other participants, the participants will be asked to re-submit the project. If the
project is found to be copied in second submission, then zero marks will be
awarded for the project.
10. Please note that there is no standard answer for the case study and the
project report will be evaluated based on the practical application of the
knowledge and skills provided through the DISA course to the specific case
study/project allotted.
11. The solution for the project should consider all details provided in the case
study/project. However, further details as required can be added to the project
report considering the overall scope and objectives of the project. These
assumptions and additional details can be provided as annexures in form of
references and supporting documents.
12. The project is expected to be completed when submitted and no additional
details will be accepted. However, during the course of evaluation, if
additional details or clarifications are sought by CIT, these are to be provided
within one week of the query.
13. There is no minimum or maximum limit of no. of pages or the project report as
the details of project report/solution varies. Typically, project report is
expected to be between 15 to 30 pages.
14. CIT will NOT provide any further details or clarifications on the allotted case
study/ project. However, if required, participants can make suitable
assumptions and these are to be clearly indicated in the project report.
Please note that evaluation of the project would be based on following criteria:
1. Understanding of the problem as outlined in the project.
2. Usage and application of course material in terms of knowledge and skills to
the problem.
3. Usage of best practices and IS Audit skills as required for the problem.
4. Presentation of the solution in a structured manner.
5. Presentation of solution in the form of deliverables as appropriate for the
problem.

Please consider the above guidelines in preparing your project report. We are
attaching the Project template in which project report is to be provided. We wish
you all the best in successful completion of the project and hope you will have a
great learning experience.