Audit information systems. Pass ISACA CISA.
Revision notes on the IS audit process, IT governance and management, systems acquisition and implementation, operations and business resilience, and the protection of information assets — built to the current outline — plus auditor-perspective practice that explains every option and full-length timed mocks.
The CISA exam at a glance
Official exam details from the ISACA exam guide — the numbers our mock exams mirror.
Taking more than one exam? Add up the exam fees across every certification you plan to earn.
Who should take the CISA?
CISA is a professional-level certification for experienced practitioners. It tests design judgment across complex, multi-service scenarios — not recall.
You lead design decisions
You're the person who chooses between architectures. CISA validates that judgment against ISACA's own bar.
You have years of hands-on work
Professional-level exams reward breadth and battle scars. If you've operated production systems on ISACA, this is the credential that says so.
You hold associate certs
The step up from associate level: longer scenarios, more trade-offs, and the most senior individual credential ISACA offers.
What’s on the CISA exam
Every lesson, question, and mock is weighted to match these official domains.
Information Systems Auditing Process
Planning and executing IS audits: audit standards and ethics, audit types, risk-based planning, control types, audit project management, testing and sampling, evidence, data analytics, reporting and quality assurance of the audit function. Official weighting 18%.
Governance and Management of IT
Evaluating IT governance and management: laws and standards, governance structure and IT strategy, policies, enterprise architecture, enterprise risk management, privacy and data governance, then IT resources, vendors, performance monitoring and quality management. Official weighting 18%.
Information Systems Acquisition, Development and Implementation
Auditing how systems are acquired, built and put into production: project governance, business cases and feasibility, development methodologies, control design, readiness and implementation testing, configuration and release, migration and data conversion, and post-implementation review. Official weighting 12%.
Information Systems Operations and Business Resilience
Auditing IT operations — components, assets, scheduling, interfaces, shadow IT, availability, incident and change management, logs, service levels and databases — and business resilience: the BIA, resilience, backup and restoration, and continuity and disaster recovery plans. Official weighting 26%.
Protection of Information Assets
Auditing information asset security — frameworks, physical controls, identity and access, network and endpoint security, DLP, encryption and PKI, cloud, mobile and IoT — and security event management: awareness, attack methods, testing and monitoring tools, incident response and forensics. Official weighting 26%.
How you’ll prepare for the CISA
Three surfaces, one loop: read, drill, rehearse — repeat until your readiness score says book it.
Read the lessons
Work domain by domain through 13 plain-English revision lessons covering every task statement in the CISA exam guide — key terms, "what's tested" callouts, and takeaways.
Drill every topic
Work through 519 exam-realistic questions in learn mode to study, or quiz mode to test yourself. Every option explains why it’s right or why it’s a trap, with one click back to the lesson.
Rehearse the exam
Sit 3 full-length timed mocks weighted to the official domains and scored on the real CISA scale — so your mock result predicts your real one.
Exam in a few days? The CISA cheat sheet puts every lesson’s key takeaways and what’s tested on one page.
Start reading CISA lessons — no account needed
Open any of these in a new tab and judge the quality yourself. If the lessons don’t earn your time, don’t sign up.
One-time. Yours for good.
The exam costs $760 — pass it once. Pro is a single payment, not a subscription.
- Every revision lesson
- 10 practice questions a day
- Cheat sheets & flashcards
- No account needed to start
- All revision lessons
- Full question bank
- All full-length mock exams
- Scaled-score readiness
- Weak-area study plan
- Unlimited practice
CISA questions, answered
Ready to pass the CISA?
No account needed to start · one-time Pro, no subscription.
Start learning free