← All Certifications
ISACA

ISACA CISA Certification

CISA · 5 domains

Last updated: March 31, 2026

Exam Syllabus & Domains

The ISACA CISA certification exam covers the following domains. Focus your training time proportionally to each domain's weight.

Domain 1 18%

Information System Auditing Process

  • 1.1 Plan an IS audit
  • 1.2 Conduct an IS audit
  • 1.3 Communicate audit results and follow up
Audit StandardsRisk-Based ApproachAudit PlanningEvidence CollectionSamplingAudit ReportingFollow-UpISACA Standards
Domain 2 18%

Governance and Management of IT

  • 2.1 Evaluate IT strategy and governance structure
  • 2.2 Evaluate IT management structure and practices
  • 2.3 Evaluate IT policies, standards, and procedures
IT StrategyGovernance FrameworksPolicies/ProceduresResource ManagementIT PerformanceQuality ManagementOrganizational StructuresMaturity Models
Domain 3 12%

Information Systems Acquisition, Development and Implementation

  • 3.1 Evaluate project management frameworks
  • 3.2 Evaluate feasibility of IS acquisitions
  • 3.3 Evaluate IT project management practices
Project ManagementBusiness CaseRequirements AnalysisSDLCTesting MethodsChange ManagementConfiguration ManagementPost-Implementation Review
Domain 4 26%

Information Systems Operations and Business Resilience

  • 4.1 Evaluate IS operations
  • 4.2 Evaluate business resilience
  • 4.3 Evaluate IT service management practices
  • 4.4 Evaluate problem and incident management
IT Service ManagementITIL FrameworkOperations ManagementBCP/DRPIncident ManagementProblem ManagementData BackupIT Asset Management
Domain 5 26%

Protection of Information Assets

  • 5.1 Evaluate information asset security and data governance
  • 5.2 Evaluate the privacy program
  • 5.3 Evaluate information asset security policies and practices
Data GovernanceData ClassificationAccess ControlsNetwork SecurityEnvironmental ControlsPhysical SecuritySecurity AwarenessPrivacy Programs

Where to Focus Your Study Time

Domains with higher weight have more exam questions — allocate your study hours accordingly.

D1 Information System Auditing Process
18%
D2 Governance and Management of IT
18%
D3 Information Systems Acquisition, Development and Implementation
12%
D4 Information Systems Operations and Business Resilience
26%
D5 Protection of Information Assets
26%

Study Tips

Free Study Resources

๐Ÿ“‹

Study Roadmap

Week-by-week study plan with free resources

โœ…

Study Tracker

Track objective completion with progress dashboard

๐Ÿ’ฐ

Cost Calculator

Total cost breakdown and ROI analysis

๐Ÿงช

Practice Quiz

Test your knowledge with free practice questions

Practice Quiz

Test your knowledge before the exam with our free practice quiz.

Take the ISACA CISA Practice Quiz

Related Comparisons

Not sure if ISACA CISA is the right choice? Compare it with similar certifications:

CISA vs CISM

Get the ISACA CISA Study Planner

Fillable PDF with 12-week schedule, domain trackers, flashcard templates, progress tracking, and quick reference sheets. Available in Standard, ADHD-Friendly, Dark Mode, and 4-Format Bundle.

Get the Study Planner — $5.99

Also available as a 4-Format Bundle for $15.99

CyberFolio

Earned your certs? Show employers.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →

Free Training Resources

Use these free tools to support your ISACA CISA certification training:

Frequently Asked Questions

What is the ISACA CISA certification?

The ISACA CISA (CISA) is a professional IT certification that validates your knowledge and skills in the exam domains covered. It is recognized globally by employers and is a valuable credential for career advancement in cybersecurity and IT.

What does the ISACA CISA certification syllabus cover?

The ISACA CISA exam syllabus covers 5 domains. Each domain is weighted differently, so focus your training on higher-weighted domains first. Review the complete domain breakdown above for objectives and key concepts.

How should I study for ISACA CISA?

Create a structured study plan covering all exam domains, use practice tests to identify weak areas, and review key concepts regularly. A fillable study planner can help you organize your training with weekly schedules and progress tracking.

How long does it take to prepare for ISACA CISA?

Preparation time varies by experience level. Most candidates spend 8-12 weeks of dedicated training. Using a structured study planner with domain-by-domain breakdown helps ensure you cover all certification objectives efficiently.