CISA — Certified Information Systems Auditor Guide

CISA is the premier certification for IS audit, control, and security professionals, issued by ISACA.

Exam Overview

Detail	Value
Provider	ISACA
Questions	150 (multiple choice)
Length	4 hours
Passing Score	450/800
Price	~$760 USD
Prerequisites	5 years of audit/security experience

Domains

Domain	Weight
Auditing IS	21%
Governance and Management of IT	17%
IS Acquisition, Development, and Implementation	12%
IS Operations and Business Resilience	23%
Protection of Information Assets	27%

Key Focus Areas

Auditing IS

• IS Audit standards, guidelines, and procedures (ISACA, COBIT, ISO)
• Risk-based audit planning, evidence collection, sampling
• Audit reporting and follow-up

Governance

• IT governance frameworks, strategy alignment
• Policies, organizational structures, roles and responsibilities
• Regulatory compliance (GDPR, SOX, PCI DSS, HIPAA)

Acquisition and Development

• SDLC phases and controls, project management
• Business case analysis, requirements management
• Change management, testing, and implementation

Operations and Resilience

• IT operations management, service level management
• Business continuity and disaster recovery planning
• Problem and incident management

Information Asset Protection

• Information security management, access controls
• Encryption, network security, physical security
• Privacy and data protection

Access CISA practice questions →