QISA Exam Information and Outline
Qualified Information Security Associate
Syllabus Update Checked on: November 6, 2026
QISA Exam Syllabus & Study Guide
Before you start practicing with our exam simulator, it is essential to understand the
official QISA exam objectives. This course outline serves as your roadmap.
The information below reflects the 2026 syllabus defined by
AISP.
Below are complete topics detail with latest syllabus and course outline, that will help you good knowledge about exam objectives and topics that you have to prepare. These contents are covered in questions and answers pool of exam.
- Exam Format
- 100 multiple-choice and multiple-answer questions (knowledge and scenario-based)
- Duration: 2 hours; closed book; online proctored (Pearson VUE OnVUE)
- QISA (Associate) awarded for scores of 50–64%
- Domain 1: Governance and Management
- Security governance, policies, standards and frameworks
- Risk management and compliance (PDPA, Cybersecurity Act)
- Security awareness and human factors
- Domain 2: Physical Security and Business Continuity
- Physical and environmental controls
- Business continuity and disaster recovery planning
- Domain 3: Security Architecture and Engineering
- Secure design principles, security models and cryptography
- Identity and access management
- Domain 4: Operation and Infrastructure Security
- Network security, cloud security and endpoint protection
- Security operations, logging and monitoring
- Domain 5: Software Security
- Secure software development lifecycle and common vulnerabilities
- Domain 6: Cyber Defence
- Threat intelligence, incident response and digital forensics
- Vulnerability management and penetration testing