ICAI DISA: pattern, syllabus and full mock tests
ICAI's post-qualification diploma in information systems audit for Chartered Accountants, earned by passing the ISA Assessment Test.
- Full-length mock exams on ICAI DISA's exact pattern
- Practice on the real exam interface, not a PDF
- Detailed weak & strong area analysis after every mock
- Exam readiness score that reflects your preparation level
You save ₹450 today
- Full-length timed mocks
- Module-wise practice
- Emerging-tech coverage
One payment, no subscription · Valid for 2 months
DISA (Diploma in Information Systems Audit) is the certificate ICAI awards on completing its Post Qualification Course in Information Systems Audit, now ISA 3.0. The course is run by ICAI's Digital Accounting and Assurance Board and is open only to members. After e-learning, 72 hours of professional training, module tests, a group project and an Eligibility Test, members sit the 200-mark Assessment Test conducted by ICAI's Examination Department; 120 marks earns the DISA certificate.
Eligibility Criteria
schoolEducation
Members of ICAI only (qualified Chartered Accountants), registered for the ISA course. To sit the Assessment Test you must first complete the 20-hour e-learning and its assessment, 72 hours of professional training with 90% attendance, score 48/
cakeAge Limit
No age limit is stated by ICAI.
flagNationality
Open to ICAI members; the AT is held at ICAI examination cities in India.
Exam Pattern
The ISA Assessment Test (AT) is a single computer-based test of 200 marks, held from 9 am to 1 pm IST at ICAI examination cities. The pass mark is 60% flat, that is 120 marks. It is conducted by ICAI's Examination Department; you apply online at isaat.icai.org and pay ₹2,000. Before it come the course's own assessments, run by the Digital Accounting and Assurance Board: three online module tests of 20 marks each (30 minutes), a group project of 20 marks (10 for the work, 10 for the viva), and the 120-mark Eligibility Test, which needs 72 to pass. ICAI does not publish the number or type of questions in the AT.
ISA Assessment Test (AT)
Computer-based test at ICAI exam cities240 min| Section | Questions | Marks |
|---|---|---|
| All six ISA 3.0 modules | - | 200 |
Key Topics & Syllabus
Module 1: Information Systems Audit Process
- check_circleConcepts of IS audit, IT risk, audit risk and materiality
- check_circleIS audit in phases: charter, scope, planning, testing, evidence and reporting
- check_circleComputer-assisted audit tools and techniques (CAATs)
- check_circleApplication controls review, including specialised systems
- check_circleIT-enabled services
Module 2: Governance, Risk Management, Compliance & BCM
- check_circleGovernance and management of information systems
- check_circleGRC frameworks and risk management practices
- check_circleKey components of a governance system
- check_circlePerformance management systems
- check_circleBusiness continuity management
Module 3: Systems Development & Application System Audit
- check_circleProject management for the SDLC
- check_circleSDLC need, benefits, phases and models (including agile and secure SDLC)
- check_circleSoftware testing and implementation
- check_circleApplication controls
Module 4: Information Systems Operations and Management
- check_circleInformation systems management
- check_circleIS operations: asset, change, configuration, log and user management
- check_circleSoftware operations: DBMS, network services, backup and patch management
- check_circleIncident response, cyber-security frameworks and SIEM tools
Module 5: Protection of Information Assets
- check_circleIntroduction to protection of information assets
- check_circleAdministrative controls and information security management
- check_circlePhysical and environmental controls
- check_circleLogical access controls
- check_circleNetwork security controls
Module 6: Emerging Technologies
- check_circleArtificial intelligence
- check_circleBlockchain
- check_circleCloud computing
- check_circleData analytics
- check_circleInternet of Things
- check_circleRobotic process automation
Inside ICAI DISA Premium
Full-length timed mocks
Practice papers scored out of 200 against the real 120-mark pass line, timed to the AT's 4-hour sitting.
Module-wise practice
Drill each of the six ISA 3.0 modules separately, so a weak module gets extra repetition before the test.
Emerging-tech coverage
Module 6 questions on AI, blockchain, cloud, data analytics, IoT and RPA, the newest part of the syllabus.
Explained answers
Every question carries a short explanation of the control, standard or concept it tests, not just the right option.
Career Roles & Salary
IS Auditor (CA practice)
Specialist audit practice area
DISA signals training in auditing IT controls, so firms use it to staff IS audit, IT general controls and systems audit engagements.
Internal Auditor / Risk Consultant
Industry and consulting roles
The governance, risk and BCM modules map directly onto IT risk reviews inside internal audit and advisory teams.
Statutory Auditor in a computerised environment
Adds IT depth to audit work
Module 1's CAATs and application-controls review applies to any audit where the books live in an ERP or core system.
Cyber-security & IT Governance roles
Controls and compliance work
Protection of information assets and incident response cover the controls side of security and compliance reviews.
Full mock tests for ICAI DISA
Everything above is free. When you're ready for unlimited full-length mocks, complete question banks and answer explanations, unlock ICAI DISA Premium - or read the full mock-test breakdown.
Each AT attempt costs ₹2,000, and ICAI held only four sittings between November 2025 and November 2026, so a miss usually means a three-to-five-month wait. Premium costs ₹349, once.
You save ₹450 today
- Full-length timed mocks
- Module-wise practice
- Emerging-tech coverage
One payment, no subscription · Valid for 2 months
How to Prepare
Enrol in the ISA course
Register on pqc.icai.org as an ICAI member. The course fee is ₹10,000 for a virtual batch or ₹20,000 for a physical batch.
Finish the e-learning
Complete the 20-hour ISA 3.0 e-learning on learning.icai.org and pass its e-learning assessment test.
Attend professional training
72 hours over 18 virtual or 12 physical sessions, with at least 90% attendance, plus three module tests and a group project.
Clear the Eligibility Test
Score 48/80 in module tests and project to qualify, then 72/120 in the Eligibility Test. The first attempt is free; later attempts cost ₹500.
Apply for the Assessment Test
Apply online at isaat.icai.org in the announced window and pay the ₹2,000 fee.
Pass the AT
Score 120 of 200 in the computer-based test. ICAI's Examination Department then dispatches your DISA certificate.
Important Dates (Tentative)
| Event | Expected Date |
|---|---|
| ISA AT, November 2026 | 28 November 2026, 9 am to 1 pm IST |
| AT application window | 8 to 21 October 2026, on isaat.icai.org |
| Previous sittings | 8 November 2025, 7 February 2026, 25 July 2026 |
* Dates are indicative based on historical patterns. Check the official website for confirmed dates.
Prepare for ICAI DISA the smarter way
Free mock tests, chapter-wise practice questions and a personalized study plan, built around the latest ICAI DISA pattern.
ICAI DISA guides
- SyllabusICAI DISA (ISA 3.0) syllabus, module by module: IS audit process, IT governance and BCM, SDLC, IS operations, information security and emerging tech.
- Exam PatternICAI DISA Assessment Test pattern: 200 marks, 9 am to 1 pm, computer-based, 60% flat to pass, plus the module tests, project and ET that come first.
- Eligibility & RegistrationWho can join ICAI's DISA (ISA 3.0) course, how e-learning, training and the Eligibility Test work, and how to apply for the AT on isaat.icai.org.
- Fees & ValidityEvery ICAI DISA fee: ₹10,000 or ₹20,000 course fee, ET re-attempt fee, the ₹2,000 Assessment Test fee, and what ICAI says about attempts and validity.
- Exam DatesThe next ICAI DISA Assessment Test is on 28 November 2026; apply 8-21 October on isaat.icai.org. Recent sittings, timing, exam cities and ET timing.
- Previous Year PapersICAI publishes no past DISA Assessment Test papers. What it does publish, chapter-end MCQs in the ISA 3.0 background material, and how to practise.
- Study MaterialDownload ICAI's free ISA 3.0 background material: six module PDFs plus lab manual and case studies. What each covers and how to use it for the DISA AT.
- PreparationA realistic DISA Assessment Test plan for working CAs: which ISA 3.0 modules need most time, using the background material, and full 4-hour papers.
- Mock Test PapersICAI's own DISA AT practice tools (e-learning test, module tests, background-material MCQs) and where a full 200-mark mock paper fits in.
- ResultWhere and when ICAI declares DISA Assessment Test results (isaat.icai.org), how long recent results took, the merit list, and what to do next.
ICAI DISA FAQ
Who can take the DISA course and Assessment Test?
Only ICAI members (Chartered Accountants). The AT is open only to members registered for the ISA course who have qualified its Eligibility Test.
What is the pass mark for the DISA Assessment Test?
60% flat, that is 120 out of 200 marks.
How long is the Assessment Test?
Four hours, from 9 am to 1 pm IST, as a computer-based test at ICAI examination cities.
What is the fee?
₹2,000 for each Assessment Test application. The course itself costs ₹10,000 (virtual) or ₹20,000 (physical), and the Eligibility Test is free the first time and ₹500 after that.
When is the next DISA exam?
The next Assessment Test is on 28 November 2026. Applications run from 8 to 21 October 2026 on isaat.icai.org.
Is DISA 2.0 still running?
No. ICAI's 2026 Assessment Tests are for the ISA 3.0 syllabus only; the December 2022 AT was the last one announced for the old and new syllabus together.
How many CPE hours does DISA give?
30 in total: 25 after completing professional training with 90% attendance, and 5 after passing the Assessment Test.
Ready to crack ICAI DISA?
Get unlimited mock tests and full explanations, or start with free practice questions today - no payment needed either way.