CI

CISA

▲ ▼

language

description CISA Overview

The Certified Information Systems Auditor (CISA) is the premier certification for IT audit and control. It validates your ability to audit, control, monitor, and assess an organization's information technology and business systems. This is a critical credential for professionals working in internal audit, external audit, or compliance roles within large corporations.

help CISA FAQ

How many questions and domains are on the CISA exam?

The CISA exam contains 150 questions covering five job-practice domains. Those domains are auditing, IT governance and management, system acquisition and development, operations and business resilience, and protection of information assets. [ISACA CISA outline](https://www.isaca.org/credentialing/cisa/cisa-exam-content-outline)

Is CISA mainly an audit certification or a penetration-testing certification?

CISA is centered on auditing, control, monitoring, and assurance rather than hands-on penetration testing. Its first domain covers risk-based audit planning, testing and sampling, evidence collection, data analytics, reporting, and quality assurance. [ISACA CISA outline](https://www.isaca.org/credentialing/cisa/cisa-exam-content-outline)

When was the CISA certification created?

ISACA says CISA dates back to 1978. The organization also reports that more than 200,000 people have earned the certification since its inception. [ISACA CISA history](https://www.isaca.org/credentialing/cisa/cisa-exam-content-outline)

What practical IT-audit work does CISA validate?

CISA validates work such as risk-based audit planning, control testing, sampling, evidence collection, audit data analytics, and communicating findings. These tasks are listed under the Information Systems Auditing Process domain. [ISACA CISA outline](https://www.isaca.org/credentialing/cisa/cisa-exam-content-outline)

swap_horiz

Looking for CISA alternatives? Compare top competitors ranked & scored

arrow_forward