Dear DISA participant,

Congratulations! on successful joining of the DISA 3.0 training. We would like to reiterate the objective
of the updated DISA course 3.0 is:

“To provide relevant practical knowledge and skills for planning and performing various types of
assurance or consulting assignments in the areas of Governance, Risk management, Security, Controls
and Compliance in the domain of Information Systems and in an Information Technology environment
by using relevant standards, frameworks, guidelines and best practices.”

The updated DISA 3.0 course is a blend of e-Learning, class room/virtual training, hands on training,
case-studies, lab manuals and project work. We are sure you will actively participate in the training and
have also gone through the e-learning modules of the course. For being eligible to write the DISA exam,
you have to pass the eligibility test and this includes submission of project report (20 marks). The
objective of project report is to test understanding and application of knowledge of DISA 3.0 Course as
relevant. The project you need to work on is based on practical scenarios relating to one/more modules
of the DISA course. Please use DISA course learning material, ICAI and international best practices in
preparing the project report.

Specific Guidelines for project report are given below:

1. The project report will be done in groups.

2. The specific project topic will be assigned by DAAB and the project report for this has to be completed
and submitted at PQC portal by the group head within 10 days from the date of commencement of
classes.

3. Participants have to work on the specific case study/project allotted to them and each of the
members is expected to actively work for the solution of the project.

4. Participants will maintain confidentiality of the project. They will not share the project or take
assistance from any others in preparing the project report.

5. The total marks for the project report is 20 marks (Project report – 10 + Viva – 10).

6. The project report is to be uploaded by the group head through his/her login at PQC portal on the
basis of which viva will be conducted by the faculty with individual group member, and marks will be
assigned.

7. Participants are encouraged to refer to the learning material of DISA course which includes
background material, reference material and e-Learning. The solution for the project can be prepared
based on these materials and there is no additional research required. However, participants are
encouraged to do additional research and use ICAI and international standards, guidelines and best
practices as required for the project. Please provide specific details of references used including
websites or publications.

8. The allotted case study/project can be updated to include additional data. However, if specific
information of any client data or information is used, this data may be sanitized so as not to include
reference to any specific client/company.
9. The project report which is the solution to the project/case study should be original work of the
member. If project report is found to be copied or similar to other participants, the participants will be
asked to re-submit the project. If the project is found to be copied in second submission, then zero
marks will be awarded for the project.

10. Please note that there is no standard answer for the case study and the project report will be
evaluated based on the practical application of the knowledge and skills provided through the DISA
course to the specific case study/project allotted.

11. The solution for the project should consider all details provided in the case study/project. However,
further details as required can be added to the project report considering the overall scope and
objectives of the project. These assumptions and additional details can be provided as annexures in
form of references and supporting documents.

12. The project is expected to be completed when submitted and no additional details will be accepted.
However, during the course of evaluation, if additional details or clarifications are sought by DAAB,
these are to be provided within one week of the query.

13. There is no minimum or maximum limit of no. of pages or the project report as the details of project
report/solution varies. Typically, project report is expected to be between 15 to 30 pages.

14. DAAB will NOT provide any further details or clarifications on the allotted case study/ project.
However, if required, participants can make suitable assumptions and these are to be clearly indicated
in the project report.

Please note that evaluation of the project would be based on following criteria:

1. Understanding of the problem as outlined in the project.

2. Usage and application of course material in terms of knowledge and skills to the problem.

3. Usage of best practices and IS Audit skills as required for the problem.

4. Presentation of the solution in a structured manner.

5. Presentation of solution in the form of deliverables as appropriate for the problem.

Please consider the above guidelines in preparing your project report. We are attaching the Project
template in which project report is to be provided. We wish you all the best in successful completion of
the project and hope you will have a great learning experience.