CISA

Full depth

ISACA · Blueprint 2024-08-01 · verified 21 September 2026

Evidence before conclusion. Independence is absolute, position in the process matters, and sufficiency decides what can be concluded.

Start free

Membership is free and takes a minute. It is what saves your position, your bands and your plan.

Join free to start Already a member? Sign in

Blueprint

1 Information Systems Auditing Process 18%

2 Governance and Management of IT 18%

3 Information Systems Acquisition, Development and Implementation 12%

4 Information Systems Operations and Business Resilience 26%

5 Protection of Information Assets 26%

Weightings taken from the owner's published exam outline. Owner's site.

What this pathway contains

200Flashcards

Blueprint-weighted, one idea per card, with the objective each one serves.

599Practice items

A direction-finder, and a check per domain with rationales withheld until you submit.

150Readiness form

Matches the real exam's length. A band is released only under four conditions.

After the exam

The certificate is the start of the job, not the end of it. This exam tests what you know about the subject. The Association's courses cover what the role asks for once the certificate is on the wall, and each one ends in an artefact you keep.

Browse the course catalog

CISA, CISM, CRISC, CGEIT, CDPSE, AAIA and AAISM are marks of ISACA. The Association is not affiliated with, endorsed by or accredited by ISACA. Pathway activity does not earn ALCs and does not lead to an Association credential.