FoxExams
USA
Certified Information Systems Auditor (CISA) Examination
600 questions
Session complete
Keep going in the FoxExams app for adaptive practice, mocks, and Ask Fox.
See you tomorrow
About this exam
The Certified Information Systems Auditor (CISA) Examination assesses knowledge and judgment in auditing, controlling, monitoring, and evaluating information systems. It is intended for professionals working in IS audit, IT risk, cybersecurity, and assurance, including accountants who review technology controls, financial systems, and audit evidence. Passing the exam is one requirement for CISA certification; candidates do not need to meet the work-experience requirement before sitting the exam, but they must meet ISACA’s experience requirements to earn the certification.
The current CISA exam is computer-based and consists of 150 multiple-choice questions completed in four hours. Its five knowledge areas cover the IS auditing process; governance and management of IT; acquisition, development, and implementation of information systems; operations and business resilience; and protection of information assets. Accountants should connect these topics to risk-based audit planning, evidence and sampling, independence, control testing, reporting, and follow-up. For the 2027–2028 cycle, check ISACA’s official exam content outline for any updates before you plan your study schedule.
How to prepare for the CISA Examination
- Use ISACA’s current CISA exam content outline to map the five domains, then prioritize topics where your accounting or audit experience is less directly applicable, such as IT operations, systems development, and information security.
- Review audit standards, ethics and independence, risk-based engagement scoping, evidence quality, sampling, workpaper documentation, reporting, and follow-up. Practise applying these principles to scenarios rather than relying only on memorized definitions.
- Build timed study sessions around exam-style questions, review why each answer is right or wrong, and keep a log of recurring gaps. Confirm exam policies and current study materials through ISACA’s official candidate resources.
FAQ
Who is eligible to take the CISA exam?
Candidates can take the exam without first meeting the work-experience requirement. To become CISA certified after passing, applicants must meet ISACA’s professional experience requirements in information systems auditing, control, security, or related areas. Check ISACA’s current certification rules for accepted experience and substitutions.
How many questions are on the CISA exam, and how long is it?
The current exam has 150 multiple-choice questions and a four-hour time limit. Exam policies and formats can change, so confirm the details in ISACA’s official candidate information for your testing cycle.
What subjects are covered on the CISA exam?
The exam covers five areas: the IS auditing process; governance and management of IT; information-system acquisition, development, and implementation; IS operations and business resilience; and protection of information assets. Use the current ISACA exam content outline to guide preparation for the 2027–2028 cycle.