Completely free
No account walls, no upsell
Free exam prep for every test — 20,000+ exam pages and 2.4M+ practice questions.
Open free CISA Exam prep resources ↗Exam facts & prep options
CISA (Certified Information Systems Auditor) Exam
The CISA Exam is ISACA's computer-based, 150-question, 4-hour certification examination for IT/IS auditors, built on the CISA Examination Content Outline effective August 2024 (5 job practice domains), delivered at authorized PSI test centers globally or by online remote proctoring, and passed with a scaled score of 450 or higher on the 200–800 scale; passing it (plus 5 years of experience) earns the Certified Information Systems Auditor certification.
Official exam siteJump to prep options ↓
Questions150 multiple-choice questions (exam includes unscored pretest items; the scored/pretest split is not published)
Testing time4 hours (240 minutes)
ScoringScaled score of 450 or higher to pass (minimum standard of knowledge); scores are a scaled conversion of the raw score and unscored pretest items are excluded from the score
Exam feeUSD 575 ISACA member / USD 760 nonmember exam registration fee, based on membership status at registration; nonrefundable and nontransferable; a separate USD 50 certification application fee applies after passing. Current official ISACA pages publish no regional fee variations.
Prep options
Study resources for CISA Exam
Independent prep
Courses and study resources
Exam overview
What to know before choosing your prep
- Who runs it
- ISACA
- Category
- Technology Governance, Risk & Compliance
- Current version
- CISA Examination Content Outline, effective August 2024 (current 5-domain job practice)
- Where it applies
- Global
- Exam languages
- English, German, Spanish, French, Japanese, Korean, Simplified Chinese
- Score scale
- 200–800 common scale (800 = perfect, 200 = lowest)
- Testing provider
- PSI
- Format
- Computer-based, at authorized PSI testing centers globally or as online remotely proctored exams
- Availability
- Continuous registration with no restrictions; appointments schedulable as early as 48 hours after payment; 6-month eligibility period from registration; appointments released up to 90 days in advance
- Results
- Preliminary pass/fail status shown on screen immediately after completing the exam; official score emailed and available online within 10 working days
- Score validity
- A passing exam result is valid for 5 years for applying toward CISA certification
- Remote testing
- Available
Exam structure
150 multiple-choice questions (one best answer; some scenario-based sets) across 5 job practice domains: Domain 1 Information System Auditing Process (18%), Domain 2 Governance and Management of IT (18%), Domain 3 Information Systems Acquisition, Development and Implementation (12%), Domain 4 Information Systems Operations and Business Resilience (26%), Domain 5 Protection of Information Assets (26%)
Where rules vary
One uniform worldwide exam; ISACA describes itself as a global association and delivers the exam 'at authorized PSI testing centers globally or as remotely proctored exams', with no country-specific variants.
Eligibility
None to sit the exam (open to anyone); the 5 years of IS/IT audit, control, assurance or security work experience (within the last 10 years, up to 3 years waivable) is required only to become certified after passing
Retake policy
Four attempts within a rolling 12-month period (initial attempt plus three retakes, counted from the first attempt); full registration fee paid per attempt