Certified Information Systems Auditor — Requirements & Free Practice
US · License preparation
200 free questions · Answer explanations · No signup required
Choose what to practice
Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements
Loading selected examination banks…
Licenses, application pathways and examination requirements
Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.
Certified Information Systems Auditor
ISACA professional certification for information systems auditing, control and security; examination passage and certification experience requirements are distinct.
Licensing authority: ISACA · Application information
Initial by examination
- Claim Ids
- ["cisa-route-adoption"]
- Description
- Pass the CISA examination and apply within five years of passage. Certification also requires five years of relevant professional experience within the ten years preceding application, subject to ISACA's available experience waivers of at most three years; experience must be verified. Experience is a certification condition, not a prerequisite to sit the examination. Pay the US$50 application processing fee, submit the application, and adhere to the Code of Professional Ethics, Continuing Professional Education Policy and Information Systems Auditing Standards. Renewal requirements are outside this initial-route investigation.
Certified Information Systems Auditor® (CISA®) exam
- Provider
- ISACA; delivered by PSI at authorized testing centers or through remote proctoring
- Format
- Computer-based, one-best-answer multiple-choice examination with four answer options
- Exam questions
- Total questions: 150; The total includes the scored and unscored questions.
- Time limit
- 4 hours (240 minutes)
- Passing score
- 450 on ISACA's 200–800 scaled-score scale
- Exam fee
- ISACA member US$575; nonmember US$760; separate certification application processing fee US$50
Examination outline
Information System Auditing Process (18%)
- Planning
- Execution
Governance and Management of IT (18%)
- IT Governance
- IT Management
Information Systems Acquisition, Development, and Implementation (12%)
- Information Systems Acquisition and Development
- Information Systems Implementation
Information Systems Operations and Business Resilience (26%)
- Information Systems Operations
- Business Resilience
Protection of Information Assets (26%)
- Information Asset Security and Control
- Security Event Management
Examination sources
- ISACA Certification Exam Candidate Guide
p. 27 / Appendix A: CISA / outline adoption
- ISACA Certification Exam Candidate Guide
pp. 28–30 / Appendix A / Supporting Tasks 1–43
- ISACA Certification Exam Candidate Guide
pp. 6–7, section 1.2, CISA column / Exam Length
- ISACA Certification Exam Candidate Guide
p. 22, Scoring Criteria
- ISACA Certification Exam Candidate Guide
p. 22, Scoring Criteria / passing standard and domain results
- ISACA Certification Exam Candidate Guide
p. 13, section 3.1 / Exam Questions
- ISACA Certification Exam Candidate Guide
p. 13, section 3.1 / answer options
- ISACA CISA certification
Register for the exam
- ISACA CISA certification
Seamless certification journey
- ISACA Certification Exam Candidate Guide
p. 8 / Exam Fees