Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by ISACA
Exam Format
240 min
150
Professional
Registration
PSI Test Centers, PSI Testing Kiosks, Remote Proctoring, or online proctoring
English, Chinese Simplified, French, German +5 more
Validity
3 years
Annual CPE requirement: 20 hours minimum; 3-year CPE requirement: 120 hours total; Annual maintenance fee required
CISA Exam Topics and Domains
CISA is organized into 5 weighted domains.
1
Information Systems Auditing Process
18%
Planning
IS Audit Standards, Guidelines, and Codes of EthicsTypes of Audits, Assessments, and ReviewsRisk-Based Audit PlanningTypes of Controls and Considerations
Execution
Audit Project ManagementAudit Testing and Sampling MethodologyAudit Evidence Collection TechniquesAudit Data AnalyticsReporting and Communication TechniquesQuality Assurance and Improvement of Audit Process
2
Governance & Management of IT
18%
IT Governance
Laws, Regulations, and Industry StandardsOrganizational Structure, IT Governance, and IT StrategyIT Policies, Standards, Procedures and PracticesEnterprise Architecture and ConsiderationsEnterprise Risk ManagementPrivacy Program and PrinciplesData Governance and Classification
IT Management
IT Resource ManagementIT Vendor ManagementIT Performance Monitoring and ReportingQuality Assurance and Quality Management of IT
3
Information Systems Acquisition, Development & Implementation
12%
Information Systems Acquisition and Development
Project Governance and ManagementBusiness Case and Feasibility AnalysisSystem Development MethodologiesControl Identification and Design
Information Systems Implementation
System Readiness and Implementation TestingImplementation Configuration and Release ManagementSystem Migration, Infrastructure Deployment, and Data ConversionPost-implementation Review
4
Information Systems Operations & Business Resilience
26%
Information Systems Operations
IT ComponentsIT Asset ManagementJob Scheduling and Production Process AutomationSystem InterfacesShadow IT and End-User ComputingSystems Availability and Capacity ManagementProblem and Incident ManagementIT Change, Configuration, and Patch ManagementOperational Log ManagementIT Service Level ManagementDatabase Management
Business Resilience
Business Impact AnalysisSystem and Operational ResilienceData Backup, Storage, and RestorationBusiness Continuity PlanDisaster Recovery Plans
5
Protection of Information Assets
26%
Information Asset Security and Control
Information Asset Security Frameworks, Standards, and GuidelinesPhysical and Environmental ControlsIdentity and Access ManagementNetwork and End-Point SecurityData Loss PreventionData EncryptionPublic Key InfrastructureCloud and Virtualized EnvironmentsMobile, Wireless, and Internet-of-Things Devices
Security Event Management
Security Awareness Training and ProgramsInformation System Attack Methods and TechniquesSecurity Testing Tools and TechniquesSecurity Monitoring Tools and TechniquesSecurity Incident Response ManagementEvidence Collection and Forensics
How do I earn this certification?
Passing CISA earns the CISA - Certified Information Systems Auditor certification. It sits in the Information Systems Audit track.
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for CISA is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2024-06-01
- Announcement date: 2024-01-01
Updates
- Artificial Intelligence and Machine Learning 2024 Update New focus on AI governance, ethics, and automated decision-making • Release date: 2024-06-01
- Blockchain and Distributed Ledger 2024 Update Added blockchain audit considerations and smart contract reviews • Release date: 2024-06-01
- Zero Trust Architecture 2024 Update Enhanced coverage of zero trust principles in security auditing • Release date: 2024-06-01
- Privacy Engineering 2024 Update Expanded privacy-by-design and privacy impact assessment content • Release date: 2024-06-01
- DevSecOps 2024 Update Integration of security in CI/CD pipeline auditing • Release date: 2024-06-01
Who should take this exam?
- Understanding of IS audit processes
- Knowledge of IT governance and management
- Familiarity with information security concepts
- Basic understanding of IT infrastructure