CISA Exam Information and Outline
Certified Information Systems Auditor
Syllabus Update Checked on: November 9, 2026
CISA Exam Syllabus & Study Guide
Before you start practicing with our exam simulator, it is essential to understand the
official CISA exam objectives. This course outline serves as your roadmap.
The information below reflects the 2026 syllabus defined by
ISACA.
Below are complete topics detail with latest syllabus and course outline, that will help you good knowledge about exam objectives and topics that you have to prepare. These contents are covered in questions and answers pool of exam.
- Exam Format
- 150 multiple-choice questions; 4 hours
- Domain 1: Information System Auditing Process (18%)
- Audit planning, standards and risk-based auditing
- Evidence, sampling and reporting
- Domain 2: Governance and Management of IT (18%)
- IT governance, frameworks and enterprise architecture
- IT risk, policies and performance
- Domain 3: Information Systems Acquisition, Development and Implementation (12%)
- Project management, business case and SDLC
- Testing, migration and post-implementation review
- Domain 4: Information Systems Operations and Business Resilience (26%)
- IT operations, problem and change management
- Business continuity and disaster recovery
- Domain 5: Protection of Information Assets (26%)
- Security frameworks and privacy
- Identity and access management, network and data security
- Security monitoring and incident response