CISA: pattern, syllabus and eligibility
ISACA's global IS audit certification, the standard for IT audit roles in banks and audit firms.
The Certified Information Systems Auditor (CISA) from ISACA certifies the ability to audit, control and assure information systems. In India it is valued for IS audit of banks, IT risk roles and Big Four technology assurance teams. It is one 150-question exam plus an experience requirement.
CISA mock tests & question bank
Coming soon
We're building CISA practice on PrepClever. Until it launches, this page has the pattern, syllabus and eligibility.
Eligibility Criteria
schoolEducation
No degree is needed to sit the exam. Certification needs 5 years of IS audit, control, assurance or security experience, gained within 10 years before applying or 5 years after passing. Some education and certifications earn waivers of up to 3 years.
cakeAge Limit
No age limit.
flagNationality
Open worldwide, with test centres and online proctoring available in India.
Exam Pattern
The CISA exam has 150 multiple-choice questions in 4 hours across five domains. Scores are scaled from 200 to 800 and 450 is the pass mark. The weights below are from ISACA's job practice.
CISA Exam
Computer-based MCQ240 min| Section | Questions | Marks |
|---|---|---|
| Information System Auditing Process (weight %) | - | 18 |
| Governance and Management of IT (weight %) | - | 18 |
| IS Acquisition, Development and Implementation (weight %) | - | 12 |
| IS Operations and Business Resilience (weight %) | - | 26 |
| Protection of Information Assets (weight %) | - | 26 |
Key Topics & Syllabus
Audit and governance
- check_circleIS audit standards and planning
- check_circleRisk-based auditing
- check_circleIT governance and management
Systems and operations
- check_circleSystems development and change management
- check_circleIT operations and service management
- check_circleBusiness continuity and disaster recovery
Security
- check_circleAccess control and identity management
- check_circleNetwork and data security
- check_circleIncident response
Career Roles & Salary
IS / IT Auditor
₹8-15 LPA
Audits IT controls and systems in banks, insurers and audit firms.
IT Risk / Technology Assurance Manager
₹15-35 LPA
Leads technology risk and assurance engagements.
How to Prepare
Register with ISACA
Book the exam online and schedule a slot at a test centre or remotely.
Study the five domains
IS Operations and Protection of Information Assets carry over half the weight.
Pass the exam
Score 450 or more on the 200-800 scale.
Apply for certification
Submit verified experience within 5 years of passing.
Important Dates (Tentative)
| Event | Expected Date |
|---|---|
| Exam availability | Year-round, booked within a 365-day eligibility window |
* Dates are indicative based on historical patterns. Check the official website for confirmed dates.
Prepare for CISA the smarter way
CISA practice is coming soon. Use the pattern and syllabus on this page to plan your study.
Related Accounting exams
- CMA (ICMAI)Cost & Management Accountant (ICMAI)
- ACCA (India)Association of Chartered Certified Accountants
- ICAI DISA (ISA 3.0)ICAI DISA - Post Qualification Course in Information Systems Audit
- IBBI Limited Insolvency ExamIBBI Limited Insolvency Examination
- IBBI Registered ValuerIBBI Registered Valuer Exam (Land & Building, SFA)
CISA FAQ
Is CISA the same as ICAI DISA?
No. CISA is ISACA's global certification. DISA is ICAI's post-qualification course for Chartered Accountants. Both cover IS audit.
Can I take CISA without experience?
Yes. You can pass the exam first and have 5 years to submit the experience.
Does PrepClever have CISA mock tests?
Not yet. CISA practice is coming soon. Until then, this page covers the pattern, syllabus and eligibility.
Ready to crack CISA?
CISA practice is coming soon. Until then, this page covers the pattern, syllabus and eligibility.