CISA

What does the CISA exam cover, on one page?

3 October 2026Credential Press1 min read

The CISA exam on one page: five domains, their weights and the two parts of each. The mnemonic at the bottom gives you the five in order.

What does the CISA exam cover, on one page?

CISA exam: five domains

1 Information System Auditing Process (18%)

Planning
Execution

2 Governance and Management of IT (18%)

IT governance
IT management

3 IS Acquisition, Development and Implementation (12%)

Acquisition and development
Implementation

4 IS Operations and Business Resilience (26%)

Operations
Business resilience

5 Protection of Information Assets (26%)

Asset security and control
Security event management

Auditors Gather All Our Proof

A Auditing process
G Governance and management of IT
A Acquisition, development and implementation
O Operations and business resilience
P Protection of information assets

CISA mind map

Embed it on your site, wiki or study group page:

<a href="https://credentialpress.com/guides/cisa-mind-map"><img src="https://credentialpress.com/img/mindmaps/cisa.png" alt="CISA mind map" width="1600" height="1131"></a>

How do you use the mind map?

Print the PDF and pin it where you study, or open the Markdown in Obsidian (a mind map plugin draws it from the headings). Say the mnemonic until you can list the domains in order, then add one item from memory under each branch. The quiz tells you which branch to revisit.

Where next?

Also free: the CISA interview questions and the CISA 10-question quiz, plus every other credential on our study tools page. For the full syllabus, the CISA Exam Guide and the CISA Practice Questions go domain by domain.

Frequently asked questions

What are the CISA exam domains?

1 Information System Auditing Process (18%); 2 Governance and Management of IT (18%); 3 IS Acquisition, Development and Implementation (12%); 4 IS Operations and Business Resilience (26%); 5 Protection of Information Assets (26%).

Is there a mnemonic for the CISA domains?

Auditors Gather All Our Proof: A for Auditing process, G for Governance and management of IT, A for Acquisition, development and implementation, O for Operations and business resilience, P for Protection of information assets.

Can I use the CISA mind map in Obsidian?

Yes. Download the Markdown file and open it in Obsidian; a mind map plugin draws it from the headings. A printable PDF and a PNG are free too.