CISA is not a technical exam. It tests whether you think like an auditor: evaluating controls, identifying risks and making sure systems support business objectives.
If your work touches IT risk, controls or assurance, CISA is the credential employers recognise first.
ISACA has awarded CISA since 1978. It is often named in job descriptions for IT audit, IT risk and assurance roles, in-house and at audit firms.
The exam tests whether you think like an independent IS auditor: risk first, evidence before conclusions. That is exactly what hiring managers want to know.
IT and internal audit, technology risk and GRC, external audit technology teams, security assurance and advisory work.
Every CISA holder qualifies for ISACA’s AAIA (AI audit), and qualified CISA holders can take the single CIA Challenge Exam instead of three parts.
| Domain | Topic | Exam weight | ≈ Questions |
|---|---|---|---|
| D1 | Information System Auditing Process | 18% | 27 |
| D2 | Governance and Management of IT | 18% | 27 |
| D3 | IS Acquisition, Development and Implementation | 12% | 18 |
| D4 | IS Operations and Business Resilience | 26% | 39 |
| D5 | Protection of Information Assets | 26% | 39 |
Six CISA products in one purchase at a bundle price: learn every domain, drill the questions, revise with visuals and flashcards, and test yourself on two full mock exams.
A 12-week coaching programme for CISA: the exam patterns, a strategy for every domain, trap drills, an error-log method, two timed mock tests and an exam-day protocol, with direct access to your coach. The strategy layer on top of the CISA Success Bundle.
18 lessons · 9 videos · 1 guide · 2 interactive
High-density CISA cheat-sheets and mini-lessons on the topics candidates find hardest: digital certificates, audit opinions, data loss prevention and media sanitisation, frameworks and key definitions. Free for everyone with an account, with more added regularly.
5 lessons · 3 cheat-sheets
Everything you need to prepare domain by domain: core concepts and distractors PDFs, video playlists, blueprints, keyword dictionaries and progress checklists for all five CISA domains, plus an IT foundations module.
7 lessons · 14 videos · 30 guides · 23 visuals
A Flashcard Arcade for every CISA domain: spaced-repetition review, a quiz game with lives and combos, and classic flip mode, with quick revision pins of the must-know answers for each set.
6 lessons · 10 flashcard sets
Two full 150-question mock exams modelled on the ISACA format and domain weightings, each with a scaled-score diagnostic report emailed to you within minutes.
3 lessons · 2 full exams
Exam-style practice for every CISA domain: domain practice sets, two quiz-game zones, a 100-question mixed set and 100 questions on emerging tech, with a method for reviewing every mistake.
10 lessons · 9 practice sets & quizzes
Five domain blueprints built for fast recall and exam-day judgment: an interactive flipbook per domain, what it covers, and the exam traps to watch for.
6 lessons · 5 visual guides
The final revision layer of the CISA Success System: a 93-page guide, read on the site, that consolidates all five domains into high-yield concepts for the last weeks before your exam.
2 lessons · 1 revision guide