CISA (Certified Information Systems Auditor) is ISACA’s IT audit / assurance exam. You evaluate controls; you do not implement them as the system owner.
Start practicing: CISA practice →
Path: ISACA certifications.
Exam overview
| Detail | Info |
|---|---|
| Questions | 150 |
| Duration | 4 hours |
| Experience | Typically 5 years (see ISACA) |
Five domains (confirm live weights)
- Information system auditing process
- Governance and management of IT
- Information systems acquisition, development, and implementation
- Information systems operations and business resilience
- Protection of information assets
Independence is the trick. The right answer often defers to evidence, sampling, and reporting — not “just fix it in production.”
10-week plan
Two weeks per domain + two weeks of mocks. Use ISACA QAE; CertStud for extra volume.
- Practice · Flashcards · Notes · Exams
Ready to Pass Your CISA Exam?
Get 300+ practice questions with detailed explanations, flashcards, and full-length practice exams. Try 10 free practice questions. Unlock 300+ questions and timed exams when you are ready.
✓ Plans from $19.99/mo • ✓ Cancel anytime • ✓ 91 certifications
