CISA exam-day guide
CISA · Prepare for the day ahead.
Your checklist
Primary photo ID
Bring a valid, unexpired government-issued photo ID with your signature. The name on the ID must match the name on your exam registration exactly. If your legal name has changed since you registered, contact the certification body before exam day to update your record.
Second form of ID
Some test delivery providers ask for a second piece of identification (e.g., a credit card or employee badge with signature). Requirements vary by location and delivery mode.
Appointment confirmation / authorization to test
Have your appointment confirmation number and the email confirming your exam authorization available (printed or on paper, since phones are typically not allowed in the testing room).
Exact test center address and route
Confirm the address and building/floor the day before. Test centers are often inside office parks or shared facilities; do a map review and note parking or transit options so you are not hunting for the door.
Remote-proctoring system check (if testing online)
If you are taking the exam via live remote proctoring, run the provider's system/equipment test in advance on the same computer and network you will use, and confirm your webcam, microphone, and browser meet requirements.
Arrival buffer
Plan to arrive well before your appointment time to allow for check-in and ID verification. Late arrivals may be refused entry or have time deducted, so build in a cushion for traffic and security screening. Confirm the provider's recommended arrival window.
Leave prohibited items behind or plan for storage
Phones, smartwatches, fitness trackers, notes, books, and bags are not allowed in the testing room. Many centers provide a locker; confirm what storage is available and avoid bringing valuables.
Know the allowed test aids
Personal calculators, scratch paper, and pens are generally not permitted; any calculator or note-taking tool used will be the one provided on screen or by the proctor. Confirm the current aid policy with the provider before relying on it.
Comfort and logistics
Use the restroom and drink water before entering the room, dress in layers for variable room temperature, and bring a snack for after the exam. Plan for a roughly four-hour continuous sitting.
Exam-day mindset material (review only)
Bring a one-page summary of the five CISA domains and their approximate weighting, plus your personal list of recurring traps (e.g., 'BEST', 'FIRST', 'MOST', auditor independence, control objectives before controls). Review it before check-in, not during the exam.
Adequate sleep and a normal meal
Do not sacrifice sleep for extra cramming in the final night. Fatigue costs more points on a 150-question, four-hour exam than one more practice set gains.
Plan the day
Reconfirm your appointment date, time, time zone, and location (or remote-proctoring setup). Verify your ID name matches your registration, and resolve any discrepancy with the provider now rather than at check-in. Print or save your confirmation details.
Stop learning new material. Do timed practice sets of 25–40 questions to rehearse pacing, then review only your error log: the domains and question types where you consistently lose points. Re-read your own summary sheets.
Practice against the real budget: 150 questions in 240 minutes is about 1.6 minutes per question. Aim to finish a full-length practice set with 20–30 minutes left for flagged items.
Shift your sleep and meal schedule toward your exam start time so you are alert during the actual testing window.
Do a light review only (domain weights, key definitions, mnemonics). Pack your ID and confirmation, lay out clothes, confirm travel time and parking, and set two alarms. Avoid heavy practice tests the day before - a bad score the night before only erodes confidence.
Re-read the provider's candidate handbook for arrival time, ID requirements, permitted items, break policy, and reschedule rules, so nothing at check-in is a surprise.
Eat a normal meal, hydrate, and avoid caffeine beyond your usual amount. Do not cram in the car or lobby. Arrive early, complete ID verification, use the restroom, and take a few calm breaths before the clock starts.
Read the full question stem before the options. Watch for qualifiers: BEST, MOST likely, FIRST step, PRIMARY. Eliminate two options, then choose between the remainder based on what an IS auditor would do. If a question stalls you past about two minutes, pick your best answer, flag it, and move on.
At roughly the halfway mark, compare questions completed to time remaining. If you are behind, tighten your pace and stop re-reading answers you have already chosen. Never leave a question blank: there is no penalty for guessing.
Reserve the last 15–20 minutes for flagged items. Change an answer only if you can point to a specific word or fact you misread - second-guessing without a reason usually hurts.
Collect your preliminary result if one is issued at the center, note anything you want to remember about the experience, and then stop analyzing questions. Official confirmation and scoring details arrive through your certification account - confirm the stated turnaround with the provider.
Rules to check
Identification: the name on your government-issued photo ID must exactly match your registration. Name changes or discrepancies must be resolved with the certification body before exam day; a mismatch can result in being turned away.
Prohibited items: no phones, smartwatches, wearable technology, notes, books, or study materials in the testing room. Unauthorized items - even if unused - can lead to score invalidation. Confirm the provider's storage and permitted-item list in advance.
Continuous sitting: plan for a roughly four-hour, 150-question exam. Any break policy (scheduled or unscheduled, and whether the clock keeps running) is set by the provider - confirm it in the candidate handbook before test day.
Scoring: CISA is scored on a scaled range of 200–800, and 450 is the passing score, based on 150 multiple-choice questions. There is no penalty for incorrect answers, so answer every question even when uncertain.
Results: preliminary pass/fail information may be issued at the test center, and official results are typically published in your certification account afterward. Do not treat the preliminary notice as final; confirm timing with the provider.
Rescheduling and retakes: fees, deadlines, and any waiting period between attempts are set by the certification body and can change. Confirm current terms with the provider rather than relying on secondhand information.
Conduct and confidentiality: do not attempt to record, reproduce, or share exam content, and follow the proctor's instructions at all times. Irregularities or suspected cheating can void your result and affect eligibility for future attempts.
Exam-day decisions over perfection: answer each question as the auditor described in the exam's own framework would, pick the BEST available option rather than the theoretically perfect one, and manage the clock so that no question is left unanswered.