Cybersecurity
CISA Exam Guide
Certified Information Systems Auditor
Read it already? Leave an honest review on Amazon. Two lines on what you used it for and whether it worked.
Not sure you need it? Test yourself first: a free 10-question CISA quiz.
12 chapters381 pagesPaperback and Kindle
ISACA publishes 5 content domains and the share of the exam each one carries. This book prints that share at the head of every domain and gives each one the pages it earns, not the pages the subject deserves. Every source named at the back, with the date it was read.
What does the CISA Exam Guide cover?
- Every chapter maps to a published domain
- There is no percentage pass mark, whatever you have read
- 150 questions in 4 hours, and one best answer
Which free guides go with this book?
- IT audit as a career: who the CISA is for and when it becomes essentialWho ISACA's CISA is for: the IT audit, assurance and security roles it serves, the SOX and DORA triggers, the five-year experience rule and the exam.
- What should you ask in a CISA interview, and how should candidates answer?CISA interview questions for employers, recruiters and HR, what a strong answer covers, and how candidates should prepare.
- What does the CISA exam cover, on one page?A one-page CISA mind map of every exam domain with a mnemonic. Free printable PDF, Markdown for Obsidian and an embeddable PNG.
- Can you pass this 10-question CISA quiz?A 10-question CISA quiz for your phone: multiple choice, instant answers, each one sourced. Share your score; free Anki flashcards.
- What does it cost to certify a team?Published fees for certifying a team in CISA, CISM, CRISC, CISSP, CIPP/E, AIGP, FRM and PECB Lead Implementer: exam, upkeep and retakes, with a budget sheet.
- What is on the ISACA CISA exam?The ISACA CISA exam: 150 questions in 4 hours, scored 200 to 800 with 450 to pass, the five domains of the August 2024 outline, fees, retakes and experience rules.
- CISA or CISM: which ISACA certification should you take?CISA or CISM, compared from ISACA's own documents: who each is for, the domains and weights, experience and waivers, cost, upkeep and the CISM change on 3 Nov 2026.
- How should you split your study time for the CISA?A CISA study plan built on ISACA's published domain weights: 50, 100 or 150 hours across the five domains of the August 2024 outline, with pacing and a free planner.
- What does DORA require of the management body, ICT auditors and staff training?DORA from the Regulation's text: the board's ICT risk duties and training (Article 5), independent control and ICT audit (Article 6), and staff training (13(6)).
How long is the CISA Exam Guide?
12 chapters, 381 pages. Paperback and Kindle.
Which Credential Press line is it part of?
Part of the Cybersecurity line. CISSP, CISM, CISA, CRISC and CCSP: study guides and practice questions for the ISC2 and ISACA exams, each weighted to the published domains.
What else is in the Cybersecurity line?
- CISM Exam Guide, Certified Information Security Manager
- CISSP Exam Guide, Certified Information Systems Security Professional
- CCSP Exam Guide, Certified Cloud Security Professional
- CRISC Exam Guide, Certified in Risk and Information Systems Control
- CCSP Practice Questions, Practice questions with full rationales, sized to the published domain weights
- CISA Practice Questions, Practice questions with full rationales, sized to the published domain weights
Questions readers ask about the CISA Exam Guide
Is this CISA exam guide 2026 edition current?
Yes. It covers the CISA Exam Content Outline effective August 2024, as printed in ISACA's Candidate Guide version 1.26. If ISACA shows a newer outline, this edition is out of date.
How is the ISACA CISA exam weighted?
Auditing Process 18%, Governance and Management of IT 18%, Acquisition, Development, and Implementation 12%, Operations and Business Resilience 26%, Protection of Information Assets 26%. Your score is the number of items you get right, whatever the domain.
Is the pass mark 70%?
No such figure is published. ISACA scores from 200 to 800 and 450 passes, but it does not publish the raw-to-scaled conversion, and the paper carries unscored pretest items too.
How long do I get per question?
Four hours for 150 questions is 96 seconds each if you spend the time evenly. Each has four options and one best answer, and several options can be true.
Do I need an ISACA course for CISA exam prep 2026?
No course appears in ISACA's steps to certify: pass the exam, pay a US$50 application fee, apply with your work experience, and follow the ethics code and CPE policy.
Can I sit the exam before I have the work experience?
Yes. ISACA gives you five years from passing to apply for certification, and the application is where you show your experience.
Can I take this CISA exam book into the test?
No. Study materials, notes and reference materials are banned, and the remote exam is closed book.
Can I sit it from home?
Yes. ISACA runs it at PSI test centers or by remote proctoring, which starts with a scan of your room and desk. A preliminary pass or fail shows on screen when you finish.
Are there real exam questions in this CISA study guide 2026 edition?
No. Every question was written for this book from the published outline. ISACA's terms forbid recreating exam content, and a book that claims real items can cost you the credential.
How is this CISA certification book different from CISA Practice Questions?
This book teaches the five domains. The companion gives you 200 four-option questions, split by the same weights, with a rationale for every answer.
Is CISA Exam Guide on sale yet?
Yes. It is on sale on Amazon in paperback and Kindle editions.
How long is it?
12 chapters, 381 pages. Paperback and Kindle.
Who is it for?
Anyone preparing for the examination it covers, and the trainers and librarians supporting them. It assumes you are a working professional paying for the exam yourself and studying in the evenings.
What is it written from?
ISACA's own published blueprint, and the primary text of the law, standard or framework the exam tests. Not from a summary, not from another preparation book, and not from a model's memory. Each source is listed at the back with the date it was checked.
How is it weighted?
By the exam board's own published blueprint. A domain that carries more of the exam gets more of the book, so you can see where the marks are before deciding where your evenings go.
Will it tell me the pass rate?
No. ISACA does not publish one for this exam, and this book states nothing it cannot trace.
Is it a substitute for the standard or the law?
No. Where the exam tests a paid standard, you will need your own licensed copy, and the book says so rather than pretending otherwise. Where the law is public, the book teaches from its own text and cites it.
Is Credential Press independent of ISACA?
Yes, and that cuts both ways. Credential Press is an imprint of Verity AI Ltd. It has no affiliation with ISACA, no sponsorship from it and no endorsement by it, and it has no inside knowledge of the exam either. Trademarks are used only to identify the examination the book prepares you for.
What happens if you get something wrong?
Send the chapter, the edition date and the source that contradicts us to hello@credentialpress.com. Confirmed corrections go into the next revision and the edition date moves forward, so readers can tell which one they have.
Can trainers, teams and libraries buy copies?
Yes, through Amazon: the book page links to its Amazon listing. We do not sell direct, offer bulk discounts or send free desk copies. Individual readers can ask for a free reader copy on the free copies page; we ask once for an honest review, and nothing depends on it. Buying for a team? See credentialpress.com/teams.