CISA

ISACA lists five domains: Information Systems Auditing Process; Governance and Management of Information Technology; Information Systems Acquisition, Development & Implementation; Information Systems Operations and Business Resilience; and Protection of Information Assets. ISACA also states that CISA addresses innovations such as AI and blockchain, so expect emerging-technology context within those domains rather than as a separate area.

ISACA lists the exam cost as US$575.00 for members and US$760.00 for non-members. Certification also involves a one-time US$50 application processing fee, payable after your official exam scores are released, before you submit the certification application. Membership pricing is worth comparing against the non-member rate if you are registering soon.

ISACA states its CISA exams are computer-based and administered at authorized PSI testing centers globally, or as remotely proctored exams. You schedule through the PSI dashboard, reached from your ISACA account under Certification & CPE Management. Verify test site availability and check system compatibility before registering, particularly if you intend to test remotely.

Registration opens a six-month eligibility period: from the date you register, you have six months to take the exam. Eligibility is established at registration and is required to schedule. Exam registration is continuous, and you can schedule as early as 48 hours after paying the registration fee, subject to appointment availability.

Appointments are only available 90 days in advance, so if your preferred site or date is not showing, check back closer to the date. You can reschedule without penalty during your eligibility period if you do so at least 48 hours before your scheduled appointment, following the steps in ISACA's Scheduling Guide.

No. ISACA states the exam is open to anyone interested in information security, and you may sit it before meeting the experience requirement. Certification requires at least five years of professional information systems auditing, control or security work experience, gained within the 10-year period preceding your application, and you must apply within five years of passing.

We could not confirm this from ISACA's published pages: the exam content page returned an error when retrieved, so question count, seat time, item formats and the passing score are not stated here. Treat any figure you see elsewhere as unverified and confirm current details in ISACA's official exam candidate guide before booking.

The ISACA pages reviewed do not publish retake terms such as waiting periods or fees, so we cannot state them here. What is confirmed: registration is continuous with no restrictions, and each registration carries a six-month eligibility period. Check ISACA's exam candidate guide and terms of use for current retake rules before you plan a second attempt.

ISACA requires at least 120 Continuing Professional Development (CPE) hours over a three-year reporting period, with a minimum of 20 CPE hours each year. CPEs that satisfy requirements for other ISACA certifications may also count toward those designations. You also continue to adhere to the Code of Professional Ethics and the Information Systems Auditing Standards.

Work domain by domain against the five areas, and weight time toward the ones where practice scores are weakest rather than rereading familiar material. Use ISACA's review manual, online review course, questions/answers/explanations database, free ten-question quiz and member study groups. Common failure modes are memorizing definitions instead of practising scenario judgement, and delaying booking until the six-month eligibility window is nearly gone.