ISACA Certified Information Systems Auditor (CISA)

ISACA Certified Information Systems Auditor (CISA) is the ISACA CISA path in CertGenius. Start with a readiness readout, then use the domain evidence, sample practice, and guided review to decide what needs work before exam week. Domain coverage includes 1.0 Information Systems Auditing Process, 2.0 Governance and Management of IT, 3.0 Information Systems Acquisition, Development and Implementation, and 2 more.

Readiness framing

CISA starts with the score.

Use the first diagnostic read to see whether this path is ready, fragile, or still untested.

Readiness

67/100 preview

Practice

376 questions

Review

376 cards

Evidence

572 skills

Sample questions

Sample 1

4.0 Information Systems Operations and Business Resilience

During an IS audit, an auditor discovers that the organization has no documented Business Continuity Plan (BCP) and has never performed a Business Impact Analysis (BIA). A major system outage occurs mid-audit. Which finding BEST describes the root cause of the organization's inability to respond effectively?

Sample 2

2.0 Governance and Management of IT

An IS auditor at a global financial institution is reviewing the organization's outsourcing arrangement with a cloud service provider. Management claims the provider's controls are adequate but cannot produce a recent third-party audit report. Which action should the IS auditor take FIRST?

Sample 3

1.0 Information Systems Auditing Process

Full practice unlocks after access

An IS auditor is planning an audit of a large enterprise and must determine which systems to prioritize. The audit committee asks how the auditor will justify the selection. Which approach BEST aligns with the CISA Review Manual's guidance on audit planning?

Get access to continue beyond these preview questions.