ISACA certification2024 exam outline

ISACA CISA® Exam Practice

Certified Information Systems Auditor

Practice for the ISACA CISA® exam

Prepare for the ISACA CISA exam across all five domains — audit process, IT governance, acquisition and development, operations and resilience, and protection of information assets.

Content reviewed October 2026.

292
Questions
5
Domains
3
Exam formats
70%
Pass mark

One-time purchase

₹499Regular price ₹1,39964% off
  • 292 exam-style questions with explanations
  • Timed exams in 3 available formats
  • Role-specific interview scenarios with guided self-review
  • Domain analytics & weakest-area drills
  • 6 months' access from purchase, including any updates for a new exam outline in that time
Enrol now · ₹499 Free 40-question test

Try it free before you buy

Reviewed by cyber security professionals with 25+ years of experience each.

Save more with a combo pack or All-Access

What you'll master

Skills this course tests

Plan risk-based IS audits and choose the right sampling and evidence

Evaluate IT governance, frameworks and management of IT

Assess system acquisition, development and implementation controls

Audit IS operations, business resilience and information asset protection

Built for ISACA candidates

  • IT and IS auditors
  • Information security managers
  • Risk, compliance and assurance professionals
  • Security leaders moving into management

Syllabus

Every domain the exam covers

Live from our question bank — the number of practice questions in each knowledge domain.

01

Information Systems Operations and Business Resilience

77 questions

02

Protection of Information Assets

75 questions

03

Information System Auditing Process

53 questions

04

Governance and Management of IT

52 questions

05

Information Systems Acquisition, Development and Implementation

35 questions

Exam simulation

Practise in the real exam format

Timed papers scored on our servers. The pass mark is 70%.

Short format

40

questions

60 minutes

Standard format

60

questions

90 minutes

Full exam simulation

100

questions

150 minutes

Free samples

Try sample questions from this course

Pick an answer to see whether you're right — and why.

Sample 1Information System Auditing ProcessDomain 1

An IS auditor is assigned to audit a newly migrated, cloud-hosted payroll application. Which of the following should the auditor perform FIRST?

Sample 2Information System Auditing ProcessDomain 1

During fieldwork, an IS auditor finds that terminated users retained active access for several months during the audit period. Management states the issue was corrected last week. What is the BEST course of action?

Sample 3Information System Auditing ProcessDomain 1

An IS auditor needs to estimate the total value of overstatement in a population of 250,000 vendor invoices where very few errors are expected. Which sampling method is MOST appropriate?

FAQ

Before you buy

Yes. Try 10 real exam-style questions with full explanations — no account needed. Every course page also has free sample questions.

Because courses unlock instantly, purchases are generally final — so try the free quiz and the free 40-question test first. We do refund duplicate payments and access problems we can't fix, and if you buy the wrong course by mistake we'll swap or refund it within 7 days, as long as you've used less than 10% of it. Report it from Purchases in your profile.

Combo packs are curated bundles for a career path (for example ISO Lead Auditor or ISACA Pro) at our biggest discounts. A custom pack lets you choose any 3 or more courses yourself at a reduced per-course price.

A single course gives you 6 months' access from the day you pay; combo packs, custom packs and All-Access give 12 months. That covers the question bank, timed exams, analytics, interview practice and study materials, including any updates in that time. Your access end date is shown on your dashboard and in Profile → Purchases. Buying a course again extends it. Purchases made before 25 October 2026 keep lifetime access.

Yes. Team plans include an admin console to assign courses, track progress and export results. Tell us your team size and we'll send a quote.

No. Exavora is an independent educational platform for exam preparation, interview preparation and practical knowledge-building. It is not affiliated with, endorsed by, sponsored by or authorized by ISO, IEC, ISACA or any certification body. Exavora does not administer official examinations, issue certificates or certifications, or guarantee exam, certification or employment outcomes. Third-party names and marks belong to their respective owners and are used only to identify related subject areas.

Review your score, domain breakdown and answer explanations, then use the results to plan your next practice session. Exavora provides exam practice and does not issue certificates or professional certifications.

Start preparing for CISA

Try the free samples and the free 40-question test, then enrol when you're ready.