ISACA · CISA

What Is ISACA Certified Information Systems Auditor (CISA)?

IS audit, governance, operations and asset protection, mapped to the official CISA job practice.

Certification PathKey

Overview

ISACA Certified Information Systems Auditor (CISA) (exam CISA) is a ISACA credential. IS audit, governance, operations and asset protection, mapped to the official CISA job practice. This PathKey™ guide summarizes the domains, format, cost signals, eligibility, and renewal pattern so you can decide before you book. Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISACA exam. ISACA sets exam content, fees, and policies.

Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISACA exam. ISACA sets exam content, fees, and policies.

Who it is for

  • IT auditors and internal auditors.
  • Assurance, compliance and risk staff who review IT controls.
  • Security professionals moving into audit.

Exam domains

Weights follow the official CISA outline.

  1. 01

    Information Systems Auditing Process

    18%

    Planning: IS Audit Standards, Guidelines, and Codes of Ethics, Types of Audits, Assessments, and Reviews, Risk-Based Audit Planning, Types of Controls and Considerations, and Execution: Audit Project Management, Audit Testing and Sampling Methodology, Audit Evidence Collection Techniques, Audit Data Analytics.

  2. 02

    Governance and Management of IT

    18%

    IT Governance: Laws, Regulations, and Industry Standards, Organizational Structure, IT Governance, and IT Strategy, IT Policies, Standards, Procedures and Practices, Enterprise Architecture and Considerations, and IT Management: IT Resource Management, IT Vendor Management, IT Performance Monitoring and Reporting, Quality Assurance and Quality Management of IT.

  3. 03

    Information Systems Acquisition, Development and Implementation

    12%

    Information Systems Acquisition and Development: Project Governance and Management, Business Case and Feasibility Analysis, System Development Methodologies, Control Identification and Design, and Information Systems Implementation: System Readiness and Implementation Testing, Implementation Configuration and Release Management, System Migration, Infrastructure Deployment, and Data Conversion, Post-implementation Review.

  4. 04

    Information Systems Operations and Business Resilience

    26%

    Information Systems Operations: IT Components, IT Asset Management, Job Scheduling and Production Process Automation, System Interfaces, and Business Resilience: Business Impact Analysis, System and Operational Resilience, Data Backup, Storage, and Restoration, Business Continuity Plan.

  5. 05

    Protection of Information Assets

    26%

    Information Asset Security and Control: Information Asset Security Frameworks, Standards, and Guidelines, Physical and Environmental Controls, Identity and Access Management, Network and End-Point Security, and Security Event Management: Security Awareness Training and Programs, Information System Attack Methods and Techniques, Security Testing Tools and Techniques, Security Monitoring Tools and Techniques.

Exam format and cost

Questions
Confirm on the vendor site
Duration
Confirm on the vendor site
Format
Multiple choice and related item types (confirm on the vendor outline)
Passing score
Confirm the passing score on the vendor site
Cost
575 USD (confirm on the vendor site)
Delivery
Vendor-approved test center or online proctoring (confirm on the vendor site)
Languages
Confirm available languages on the vendor site

Experience and eligibility

ISACA requires five years of professional experience in IS or IT audit, control, assurance or security. ISACA allows waivers for up to three of those years. You can take the exam before you have the experience. ISACA gives you five years after passing to apply for certification. We don't add enrollment prerequisites of our own.

Renewal

Renewal rules for ISACA Certified Information Systems Auditor (CISA) are set by ISACA. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.

Roles this credential fits

  • Information Systems Auditing Process, Governance and Management of IT, Information Systems Acquisition, Development and Implementation, Information Systems Operations and Business Resilience, Protection of Information Assets, mapped to the official ISACA CISA job practice.
  • IT Audit
  • Teams standardizing on this credential for hiring or compliance

ISACA Certified Information Systems Auditor (CISA) questions

Is ISACA Certified Information Systems Auditor (CISA) worth it?

ISACA Certified Information Systems Auditor (CISA) is worth it when employers or contracts in your market ask for ISACA proof, or when the domains match work you already do or want next. Common roles include Information Systems Auditing Process, Governance and Management of IT, Information Systems Acquisition, Development and Implementation, Information Systems Operations and Business Resilience, Protection of Information Assets, mapped to the official ISACA CISA job practice., IT Audit, and Teams standardizing on this credential for hiring or compliance. Read the roles and domains on this page, then decide against your timeline and budget.

How hard is ISACA Certified Information Systems Auditor (CISA)?

You get Confirm on the vendor site in Confirm on the vendor site. Format: Multiple choice and related item types (confirm on the vendor outline). Passing score: Confirm the passing score on the vendor site. ISACA requires five years of professional experience in IS or IT audit, control, assurance or security. People who pass usually mix domain study with timed practice, not reading alone.

Does ISACA Certified Information Systems Auditor (CISA) expire?

Renewal rules for ISACA Certified Information Systems Auditor (CISA) are set by ISACA. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.

How does Accumentum help with ISACA Certified Information Systems Auditor (CISA)?

We offer Expert-led training mapped to the ISACA Certified Information Systems Auditor (CISA) domains, PathPay® payment options, PathPass™ practice where the exam is in our catalog, a free ReadyScore™ so you can see where you stand before class, and military funding support where you qualify. We are an Army CA and Air Force COOL Approved Vendor. Our pass rate across Accumentum certification attempts since August 2022 is 98.8% (2,412 certified of about 2,441 attempts).

How much does the ISACA Certified Information Systems Auditor (CISA) exam cost?

Exam voucher pricing for ISACA Certified Information Systems Auditor (CISA) is set by ISACA and varies by region and bundle. Confirm the current price on the official store before you buy. PathPay® can spread Accumentum course tuition when you train with us.

What are the ISACA Certified Information Systems Auditor (CISA) prerequisites?

ISACA requires five years of professional experience in IS or IT audit, control, assurance or security. ISACA allows waivers for up to three of those years. You can take the exam before you have the experience. ISACA gives you five years after passing to apply for certification. We don't add enrollment prerequisites of our own.

What should I take after ISACA Certified Information Systems Auditor (CISA)?

After ISACA Certified Information Systems Auditor (CISA), pick the next credential that matches the job you want, not a generic ladder. Use the roles on this page and neighboring PathKey™ guides from the same vendor to plan the sequence. If you need a readiness check first, start with ReadyScore™ when we offer one for this exam.

Official sources

Always confirm fees, dates, and eligibility on the vendor site before you register. Vendors change outlines and prices without notice.