SteadfastIQ
All certifications
ISACACISA (2024 outline)

ISACA CISA – Certified Information Systems Auditor

Exam overview, official domain weights and free sample questions. Subscribers get 230 practice questions, 109 flashcards, 5 labs, a study guide and video lessons for this exam.

Exam at a glance

Exam code
CISA (2024 outline)
Questions
150
Time
240 minutes
Question types
multiple choice (one best answer, four options)
Passing score
450 on a scaled score of 200–800
Exam fee
US$575 (ISACA member) / US$760 (non-member)
Delivery
PSI testing center, remote proctored
Prerequisites
To take the exam: none. To get certified: 5 years of IS audit, control, or security experience gained in the 10 years before applying (waivers cover up to 3 years), and a US$50 application fee. You must apply within 5 years of passing
Renewal
120 CPE hours per 3-year cycle, with at least 20 CPE hours per year, plus annual maintenance fees. You must also follow the Code of Professional Ethics and IS Auditing Standards
Version notes
not published

From the official exam page (checked 2026-11-09). Always confirm details with the vendor: official exam page, official objectives.

Domains and weights

Information System Auditing Process18%
Governance and Management of IT18%
  • 2A IT Governance
  • 2B IT Management
Information Systems Acquisition, Development, and Implementation12%
Information Systems Operations and Business Resilience26%
  • 4A Information Systems Operations
  • 4B Business Resilience
Protection of Information Assets26%
  • 5A Information Asset Security and Control
  • 5B Security Event Management

Free sample questions

Original questions in the style of the exam. Pick an answer to see the explanation.

Sample question 1 · Information System Auditing Process

An IS audit manager is preparing next year's audit plan with limited staff. What should be done FIRST?

Sample question 2 · Governance and Management of IT

The board wants advice on how IT can support the organization's long-term strategic direction. Which body provides this?

Sample question 3 · Information Systems Acquisition, Development, and Implementation

Before a major system acquisition is approved, what should confirm that the project is justified?

Unlock every question, lab and guide

Full access to all 20 certifications for $4.99/month. Cancel anytime.