Search...
Everything needed to plan for the CISA (CISA) exam: number of questions, time limit, passing score, and the official domain weightings. For the domain checklist, see the CISA study guide. For a week-by-week plan, see the CISA study plan.
Facts last checked . Vendor links for this exam are on the materials page. To correct a figure, use the corrections policy.
CISA (CISA) is a Professional level ISACA certification exam with 150 questions in 240 minutes (last checked 2026-10-19), requiring a scaled score of 450 to pass. It covers 5 domains: Protection of Information Assets (25%); Information Systems Auditing Process (21%); Information Systems Operations and Business Resilience (20%); Information Systems Acquisition, Development and Implementation (18%); Governance and Management of IT (16%).
Exam code
CISA
Questions
150
Time limit
240 min
Passing score
450 scaled
Official domains
5
Level
Professional
Provider
ISACA
Practice questions
300+ on CertStud
| Domain | Weight | What it covers |
|---|---|---|
| Protection of Information Assets | 25% | Provide assurance that the organization's information security policy, standards and controls protect information assets |
| Information Systems Auditing Process | 21% | Provide audit services in accordance with IT audit standards |
| Information Systems Operations and Business Resilience | 20% | Provide assurance that IT operations and business resilience processes support organizational objectives |
| Information Systems Acquisition, Development and Implementation | 18% | Provide assurance that systems acquisition, development and implementation practices meet organizational objectives |
| Governance and Management of IT | 16% | Provide assurance that the enterprise's IT governance and management support organizational strategies |
Percentages reflect published official domain weightings. Prerequisite knowledge and current scoring rules are confirmed on the ISACA exam page before booking.
The CISA figure on file is 150 questions. Last checked 2026-10-19. Confirm the current figure with ISACA before you book.
The CISA time limit on file is 240 minutes. Last checked 2026-10-19. Confirm the current figure with ISACA before you book.
The CISA exam requires a scaled score of 450 to pass. A scaled score is not a raw percentage of correct answers. Last checked 2026-10-19. Confirm the current figure with ISACA before you book.
The CISA exam covers 5 official domains: Information Systems Auditing Process (21%), Governance and Management of IT (16%), Information Systems Acquisition, Development and Implementation (18%), Information Systems Operations and Business Resilience (20%), Protection of Information Assets (25%).
Protection of Information Assets carries the heaviest weighting on the CISA exam at 25% of the exam. Provide assurance that the organization's information security policy, standards and controls protect information assets
CISA is the exam code for CISA (CISA - Certified Information Systems Auditor), a Professional level ISACA certification exam covering 5 domains.
The CISA exam reports a scaled score. The passing score on file is 450. Plan for 150 questions across 240 minutes, weighted by domain: 25% Protection of Information Assets, 21% Information Systems Auditing Process, 20% Information Systems Operations and Business Resilience, 18% Information Systems Acquisition, Development and Implementation, 16% Governance and Management of IT. Last checked 2026-10-19. Confirm the current figure with ISACA before you book.
CertStud offers free CISA practice questions with detailed explanations, plus full-length practice exams and flashcards at https://certstud.com/certifications/isaca/cisa. Start with 10 free questions at https://certstud.com/try-free.