- Planning: IS Audit Standards, Guidelines, and Codes of Ethics, Types of Audits, Assessments, and Reviews, Risk-Based Audit Planning, Types of Controls and Considerations.
- Execution: Audit Project Management, Audit Testing and Sampling Methodology, Audit Evidence Collection Techniques, Audit Data Analytics.
ISACA Certification Training Course
ISACA Certified Information Systems Auditor (CISA) Certification Training Course
We'll get you ready for the ISACA CISA exam, the credential for professionals who audit, control and assure information systems.
Course focus: Information Systems Auditing Process, Governance and Management of IT, Information Systems Acquisition, Development and Implementation, Information Systems Operations and Business Resilience, Protection of Information Assets, mapped to the official ISACA CISA job practice.
Course Overview
What the CISA Course Covers
The CISA exam covers 5 domains in the ISACA job practice. Information Systems Operations and Business Resilience carries the most weight at 26%, so we give it the most class time.
Our live virtual class follows the job practice domain by domain, with practice questions in the scenario style ISACA uses. We also walk you through registration, scheduling with PSI and the application you file after you pass.
CISA is the credential most IT audit job postings name, and it signals that you can plan an audit, test controls and report findings that leadership will act on. ISACA keeps the job practice current, and the five domains run from audit process through governance, development, operations and protection of information assets.
Operations and Business Resilience and Protection of Information Assets each carry 26% of the exam, so more than half your score comes from how IT actually runs and how it is protected. We spend real time there, with walkthroughs of backup and recovery testing, access reviews, change control and incident evidence.
Accumentum is an independent training provider. We are not affiliated with or endorsed by ISACA, and this isn't official ISACA training. ISACA sets exam content, fees and policies, so check isaca.org before you register.
Course Objectives
What You Will Be Able to Do
01
Cover Every Domain
Work through all 5 domains in the official CISA job practice, weighted the way the exam weights them.
02
Go Deep on Information Systems Operations and Business Resilience
This domain is 26% of the exam per ISACA, so it gets the most class time.
03
Think Like ISACA
ISACA questions ask for the best answer from a management and business view. We practice that every session.
04
Be Ready for Test Day
You'll know the format: 150 multiple choice questions in four hours, scored from 200 to 800.
05
Test and Report on Controls
Choose the right test, collect sufficient evidence and write findings that tie back to risk.
06
Plan Your Certification
Know the experience ISACA asks for, how waivers work and when to file your application.
Who Should Attend
- IT auditors and internal auditors.
- Assurance, compliance and risk staff who review IT controls.
- Security professionals moving into audit.
- Consultants who assess information systems for clients.
- Financial auditors moving into technology audit.
- IT operations staff who support audits and want to lead them.
Prerequisites
- ISACA requires five years of professional experience in IS or IT audit, control, assurance or security. ISACA allows waivers for up to three of those years.
- You can take the exam before you have the experience. ISACA gives you five years after passing to apply for certification. We don't add enrollment prerequisites of our own.
Pathway Map
CISA Course Pathway
Every module opens with the exam domain it maps to, so you can see how the pieces fit together across the course.
Course Content
- IT Governance: Laws, Regulations, and Industry Standards, Organizational Structure, IT Governance, and IT Strategy, IT Policies, Standards, Procedures and Practices, Enterprise Architecture and Considerations.
- IT Management: IT Resource Management, IT Vendor Management, IT Performance Monitoring and Reporting, Quality Assurance and Quality Management of IT.
- Information Systems Acquisition and Development: Project Governance and Management, Business Case and Feasibility Analysis, System Development Methodologies, Control Identification and Design.
- Information Systems Implementation: System Readiness and Implementation Testing, Implementation Configuration and Release Management, System Migration, Infrastructure Deployment, and Data Conversion, Post-implementation Review.
- Information Systems Operations: IT Components, IT Asset Management, Job Scheduling and Production Process Automation, System Interfaces.
- Business Resilience: Business Impact Analysis, System and Operational Resilience, Data Backup, Storage, and Restoration, Business Continuity Plan.
- Information Asset Security and Control: Information Asset Security Frameworks, Standards, and Guidelines, Physical and Environmental Controls, Identity and Access Management, Network and End-Point Security.
- Security Event Management: Security Awareness Training and Programs, Information System Attack Methods and Techniques, Security Testing Tools and Techniques, Security Monitoring Tools and Techniques.
Course Features
How We Teach It
Expert-Led Classes
Live virtual instruction with time for questions, so you aren't figuring out the hard parts alone.
Job Practice Mapping
Every module maps to a domain in the official CISA job practice.
Practice Questions
Scenario based practice questions with explanations for every answer.
Registration Help
We help you register with ISACA, schedule with PSI and plan your certification application.
Certification Exam
CISA exam details
CISA Exam Readiness
Our class maps to the official CISA outline so you walk in knowing what to expect.
Per ISACA, the CISA exam has 150 multiple choice questions in four hours. It's offered at PSI test centers or by remote proctoring with continuous registration. Scores are scaled from 200 to 800 and a 450 or higher passes. ISACA lists the exam fee at US$575 for members and US$760 for non-members. The exam is offered in English, Spanish, Chinese Simplified, French, German, Korean and Japanese. Source: https://www.isaca.org/credentialing/cisa
Exam Format
CISA Exam at a Glance
Questions
150 multiple choice questions.
Time
4 hours.
Delivery
Computer based, at a PSI test center or by remote proctoring, with continuous registration.
Scoring
Scaled scores from 200 to 800. A score of 450 or higher passes.
Exam Fee
US$575 for ISACA members and US$760 for non-members, per ISACA. A US$50 application processing fee applies when you apply for certification after passing.
Languages
English, Spanish, Chinese Simplified, French, German, Korean and Japanese.
Careers
Where the CISA Can Take You
CISA holders work wherever someone has to give an independent opinion on IT controls. That includes internal audit teams, public accounting firms, regulators and the compliance side of IT. Many people use CISA to move from IT operations or security into audit, or from financial audit into technology audit.
IT Auditor
Plans and runs audits of systems, applications and IT general controls.
Internal Audit Manager
Owns the audit plan and reports results to the audit committee.
IT Risk and Compliance Analyst
Maps controls to frameworks and tracks remediation.
Technology Assurance Consultant
Delivers SOC reports and control assessments for clients.
Study Plan
How We Prepare You for the CISA
We teach CISA the way auditors think. Every topic starts with the risk, then the control, then how you would test it and what evidence you'd ask for. That is how ISACA writes its questions, and it is how the job works.
Most students study a few hours a week alongside class. We give you a domain by domain plan, timed practice sets and a final readiness check so you book the exam when your scores say you're ready.
Audit Process First
Domain 1 sets the vocabulary for the rest of the course, so we cover standards, sampling and evidence early.
Control Testing Drills
Short scenarios where you choose the best test and the right evidence.
Timed Practice
Full length timed sets so 150 questions in four hours feels normal.
Readiness Check
A final review of weak areas before you schedule with PSI.
Funding
Paying for CISA Training
We are an Army CA and Air Force COOL Approved Vendor, so eligible service members can often use those programs toward CISA training. Your education counselor decides what gets approved, and we help you put the paperwork together.
If you're paying yourself or through your employer, PathPay spreads tuition into monthly payments. Email info@accumentum.net and we will send a quote for the CISA class that you can pass to a manager or training budget owner.
Army CA
Send us your request details and we will provide the course quote and documents your counselor asks for.
Air Force COOL
We are an approved vendor. We help you confirm the credential is on your COOL list before you apply.
PathPay
Monthly payments instead of one lump sum. See the PathPay page for current terms.
Employer Paid
We provide quotes and course outlines your employer can use to approve the spend.
Domain Guide
CISA Domains in Detail
Domain 1: Information Systems Auditing Process (18%)
Planning covers IS Audit Standards, Guidelines, and Codes of Ethics, Types of Audits, Assessments, and Reviews, Risk-Based Audit Planning and Types of Controls and Considerations. Execution covers Audit Project Management, Audit Testing and Sampling Methodology, Audit Evidence Collection Techniques, Audit Data Analytics and Reporting and Communication Techniques.
Domain 2: Governance and Management of IT (18%)
IT Governance covers Laws, Regulations, and Industry Standards, Organizational Structure, IT Governance, and IT Strategy, IT Policies, Standards, Procedures and Practices, Enterprise Architecture and Considerations and Enterprise Risk Management. IT Management covers IT Resource Management, IT Vendor Management, IT Performance Monitoring and Reporting and Quality Assurance and Quality Management of IT.
Domain 3: Information Systems Acquisition, Development and Implementation (12%)
Information Systems Acquisition and Development covers Project Governance and Management, Business Case and Feasibility Analysis, System Development Methodologies and Control Identification and Design. Information Systems Implementation covers System Readiness and Implementation Testing, Implementation Configuration and Release Management, System Migration, Infrastructure Deployment, and Data Conversion and Post-implementation Review.
Domain 4: Information Systems Operations and Business Resilience (26%)
Information Systems Operations covers IT Components, IT Asset Management, Job Scheduling and Production Process Automation, System Interfaces and Shadow IT and End-User Computing. Business Resilience covers Business Impact Analysis, System and Operational Resilience, Data Backup, Storage, and Restoration, Business Continuity Plan and Disaster Recovery Plans.
Domain 5: Protection of Information Assets (26%)
Information Asset Security and Control covers Information Asset Security Frameworks, Standards, and Guidelines, Physical and Environmental Controls, Identity and Access Management, Network and End-Point Security and Data Loss Prevention. Security Event Management covers Security Awareness Training and Programs, Information System Attack Methods and Techniques, Security Testing Tools and Techniques, Security Monitoring Tools and Techniques and Security Incident Response Management.
After the Exam
Scheduling, Retakes and Certification
ISACA exam registration is continuous, so you can register when you are ready and then schedule a seat with PSI at a test center or for remote proctoring. If you need to cancel or change an appointment, ISACA requires you to do it at least 48 hours before your scheduled time.
ISACA allows four attempts in a rolling 12 month period. After a first attempt that does not pass, you wait 30 days to retake, then 90 days before each of the next two attempts, and you pay the full registration fee each time.
Passing the exam is the first step. You then have five years to apply for CISA certification, pay the US$50 application processing fee, show the required work experience and agree to ISACA's Code of Professional Ethics and Continuing Professional Education policy. We walk you through that application in class.
Keep Exploring
Related Courses and Resources
Frequently Asked Questions
Common questions about our CISA class and the exam.
The Certified Information Systems Auditor (CISA) is an ISACA credential. Details are on the official page at https://www.isaca.org/credentialing/cisa.
No. We're an independent training provider. Our course follows the public ISACA job practice. ISACA sells its own review materials at isaca.org.
ISACA lists the exam fee at US$575 for members and US$760 for non-members. After you pass, ISACA charges a US$50 application processing fee when you apply for certification.
ISACA requires five years of professional experience in IS or IT audit, control, assurance or security. ISACA allows waivers for up to three of those years.
Yes. ISACA offers the exam at PSI test centers or by remote proctoring.
We are an Army CA and Air Force COOL Approved Vendor. Email info@accumentum.net and we will help you check what your benefit covers.
It is a broad exam. Questions are scenario based and ask for the best answer, so knowing definitions is not enough. Our practice sets are built around that style.
Yes. You can pass the exam first. ISACA gives you five years after passing to apply, and you need to meet the experience requirement when you apply.
Information Systems Operations and Business Resilience and Protection of Information Assets are 26% each, per ISACA. Together they are more than half the exam.
DoD 8140 work role mappings change over time. Check the current DoD Cyber Workforce materials for your role, and email us if you want help reading them.
ISACA allows four attempts in a rolling 12 month period, with waits of 30 days after the first attempt and 90 days after the second and third. Each attempt is paid in full.
You follow ISACA's Continuing Professional Education policy. Check isaca.org for current CPE and maintenance fee requirements.
Enrollment
Enroll in CISA Training
Ready to start? Register on our registration page or email info@accumentum.net with questions about the CISA class.
Start Your CISA Prep
Questions about schedules or funding? Email info@accumentum.net.