Loading exam details…
Loading exam details…
A current guide to the ISACA CISA exam, including the 150-question PSI format, 4-hour timing, five domain weights, six-month eligibility, 450 passing score, and scheduling rules.
CISA validates information systems audit, control, assurance, and security knowledge. Preparation should connect ISACA job-practice domains to scenario judgment, governance language, operations resilience, asset protection, and timed multiple-choice pacing.
Use these points before registering with ISACA or scheduling the PSI appointment.
CISA is ISACA's Certified Information Systems Auditor credential for IS/IT audit, control, assurance, and security professionals.
The CISA exam has 150 multiple-choice questions and a 4-hour time limit.
ISACA certification exams are computer-based and administered through PSI test centers or remote proctored delivery.
Information Systems Operations and Business Resilience and Protection of Information Assets are each weighted at 26%.
After registration, candidates have a six-month eligibility period to schedule and take the exam.
ISACA uses a scaled score from 200 to 800, and 450 or higher is required to pass.
CISA preparation should be organized around ISACA's job-practice domains: Information System Auditing Process, Governance and Management of IT, Information Systems Acquisition, Development and Implementation, Information Systems Operations and Business Resilience, and Protection of Information Assets.
Operations and Business Resilience and Protection of Information Assets together account for more than half the exam. Build extra practice around change management, service management, disaster recovery, incident response, business continuity, access controls, network security, data protection, and security monitoring.
The CISA exam is not only a technology vocabulary test. Many questions ask for the best audit response, strongest evidence, most appropriate control, or highest-risk condition in a governance or operational scenario.
Candidates can schedule after ISACA registration payment is processed. Before exam day, confirm the six-month eligibility window, PSI location or remote-proctor requirements, ID name match, appointment confirmation, rescheduling deadline, and accommodations status.
Use this CISA (Certified Information Systems Auditor) exam help page for exam-specific context, then compare the broader online exam help services page or contact HiraEdu if you need a direct handoff. This page stays focused on CISA (Certified Information Systems Auditor) while the linked service pages cover broader exam support options.
The Certified Information Systems Auditor exam validates IS/IT audit, control, assurance, and security knowledge for professionals who assess information systems and advise on governance, risk, resilience, and protection of information assets. ISACA's current CISA exam has 150 multiple-choice questions, a 4-hour time limit, and five job-practice domains: Information System Auditing Process at 18%, Governance and Management of IT at 18%, Information Systems Acquisition, Development and Implementation at 12%, Information Systems Operations and Business Resilience at 26%, and Protection of Information Assets at 26%. ISACA certification exams are computer-based and administered through PSI test centers or remote proctored delivery, with continuous registration, a six-month eligibility period, and scheduling available as early as 48 hours after registration payment. Candidates should verify PSI site availability or remote-system compatibility, ID name matching, exam-day rules, special accommodations, rescheduling deadlines, and ISACA's 450 passing scaled score and official-score timeline before exam day.
The CISA exam has 150 multiple-choice questions and a 4-hour time limit.
The current CISA domains are Information System Auditing Process at 18%, Governance and Management of IT at 18%, Information Systems Acquisition, Development and Implementation at 12%, Information Systems Operations and Business Resilience at 26%, and Protection of Information Assets at 26%.
Yes. ISACA certification exams are administered through PSI test centers or remote proctored delivery after ISACA registration.
ISACA reports certification exam scores on a 200 to 800 scale, and a scaled score of 450 or higher is required to pass.
ISACA gives candidates a six-month eligibility period after registration to schedule and take the exam.
Check the ISACA account, exam registration status, six-month eligibility dates, PSI scheduling access, and government ID name match.
Build a study calendar around the 18%, 18%, 12%, 26%, and 26% domain weights, giving the largest blocks to operations resilience and asset protection.
For every missed item, identify whether the issue was audit objective, evidence quality, control design, risk priority, governance responsibility, or technical control knowledge.
Run full 150-question practice sessions with review marks, pacing checkpoints, and a disciplined process for narrowing scenario answers.
Confirm test-center rules or remote-system requirements, accepted ID, check-in time, rescheduling cutoff, personal-item policy, and the ISACA score-report process.
Use the guide to self-serve, or talk to a coordinator if you need help mapping timelines, official requirements, or troubleshooting day-of logistics.
CISSP (Certified Information Systems Security Professional)
Pearson VUE
View serviceCCSP (Certified Cloud Security Professional)
Pearson VUE
View serviceSSCP (Systems Security Certified Practitioner)
Pearson VUE
View serviceCC (Certified in Cybersecurity)
Pearson VUE
View serviceCGRC (Certified in Governance, Risk and Compliance)
Pearson VUE
View serviceCSSLP (Certified Secure Software Lifecycle Professional)
Pearson VUE
View service