CISA study guide: how to prepare for the exam
Preparing for the CISA exam starts with one free document: ISACA’s exam content outline, which lists every topic and how much each of the five domains weighs. Build your plan on those weights, choose your study material, and test yourself by domain until no area is still costing you points.
See the CISA practice questions →
Start your CISA exam preparation with the outline
The CISA exam is 150 multiple-choice questions in four hours, spread across five domains. ISACA publishes the weights, and they should decide where your time goes:
- Information Systems Auditing Process — 18%
- Governance and Management of IT — 18%
- Information Systems Acquisition, Development and Implementation — 12%
- Information Systems Operations and Business Resilience — 26%
- Protection of Information Assets — 26%
Source: ISACA — CISA exam content outline. Checked 9 October 2026.
A CISA exam study plan in four phases
ISACA sets no number of study hours, and the right amount depends on your background — certification requires five years of relevant experience, so many candidates already do part of the job the exam describes. What works regardless of background is a plan with four phases:
- Baseline: answer a mixed set of practice questions before you read anything, so you know which domains are strong and which are not.
- Learn by domain: work through your study material domain by domain, giving the two 26% domains the most time and not skipping the 12% domain just because it is small.
- Practise by domain: after each domain, answer questions on it and read the explanation for every option, including the ones you ruled out.
- Full-length rehearsal: sit 150 questions in four hours at least once, to check your pace before exam day.
Source: ISACA — CISA exam content outline. Checked 9 October 2026.
Preparing for CISA exam questions: think like an auditor
Knowing the material is only half the task; the other half is answering from the right seat. CISA questions often offer several options that would work; the correct one is usually what an independent auditor should do first, or what gives the most reliable evidence. When you study for CISA, practise asking “what is the auditor’s role here?” before choosing.
This is also where explanations matter more than scores. Because ISACA’s score report gives domain-level results only for information and no question-level feedback, the explanations you read during preparation are the only place you learn why an option is wrong.
Source: ISACA — Certification Exam Candidate Guide (CISA, CISM, CGEIT, CRISC, CDPSE), version 1.26. Checked 9 October 2026.
ISACA CISA study materials
ISACA sells its own CISA exam study materials and lists them on its certification page:
- The CISA Review Manual, in digital and print versions.
- The CISA Questions, Answers & Explanations Database, sold as a subscription.
- The CISA Online Review Course, which ISACA describes as its official on-demand course, with over 40 modules covering all five domains and a full year of access.
- A free 10-question CISA practice quiz.
Source: ISACA — CISA certification. Checked 9 October 2026.
What are the best CISA study materials?
The best CISA study material is the set that covers all five domains against the current outline and tells you why answers are right or wrong. Check three things before you buy: that it is written for the current exam content outline, that it explains every answer option rather than only the correct one, and that it lets you track results by domain.
A sensible combination for most candidates is one reference text for learning — such as ISACA’s review manual — plus a question bank for practice. Certsqill is the practice part: expert-developed CISA practice questions with an explanation for every option and a readiness score for each domain, backed by a 7-day money-back guarantee.
Source: ISACA — CISA certification. Checked 9 October 2026.
CISA certification study material free download: what to watch for
The free CISA exam preparation material that ISACA itself provides is the exam content outline and the 10-question practice quiz. ISACA sells its review manual in digital and print form, so a free download of it is not coming from ISACA.
Files sold or shared as real exam questions are a different risk: ISACA’s candidate guide prohibits sharing, disclosing or discussing exam content and lists sanctions up to a ban from ISACA exams and revocation of certifications. They are also no reliable CISA prep, because you cannot tell whether the answers are correct.
Source: ISACA — Certification Exam Candidate Guide (CISA, CISM, CGEIT, CRISC, CDPSE), version 1.26. Checked 9 October 2026.
ISACA CISA exam prep: know when you are ready
ISACA reports scores on a 200–800 scale with 450 as the pass mark, which is not a percentage of correct answers, so no practice score translates directly into a pass. A more useful test is whether every domain holds up on its own: if one 26% domain is weak, a good overall result in practice can hide it.
Book once your weakest domain is consistently solid. Registration gives you a six-month eligibility period and appointments open 90 days in advance, so you can register when your plan is under way and schedule once the practice results agree.
Source: ISACA — Certification Exam Candidate Guide (CISA, CISM, CGEIT, CRISC, CDPSE), version 1.26. Checked 9 October 2026.
CISA study guide: questions people ask
What is the best preparation for CISA exam day?
Study by domain using ISACA’s exam content outline and its weights, practise with questions that explain every option, and rehearse 150 questions in four hours at least once. Source for exam format: ISACA candidate guide, checked 9 October 2026.
Is there an official CISA exam study guide?
ISACA publishes the free exam content outline and sells the CISA Review Manual, a questions, answers and explanations database and an on-demand online review course. Source: ISACA CISA page, checked 9 October 2026.
How many hours should I study for CISA?
ISACA does not set a figure. It depends on how much of the five domains you already cover at work; certification itself requires five years of relevant experience.
What is the best CISA test prep for the 26% domains?
Information Systems Operations and Business Resilience and Protection of Information Assets carry 26% each. Give them the most time in your plan and check them separately in practice, so a strong overall score does not hide a weak domain. Source for weights: ISACA exam content outline, checked 9 October 2026.
How should I practise for the CISA time limit?
The exam allows four hours for 150 questions — just over a minute and a half per question. Sit at least one full-length timed practice run before exam day. Source: ISACA candidate guide, checked 9 October 2026.
