CISA Exam Study Guide 2027–2028 | ISACA Certified Information Systems Auditor Exam Prep, 200 Practice Questions (PDF)

Prepare for the ISACA Certified Information Systems Auditor (CISA) exam with a complete study guide organized by the five domains of the official CISA Exam Content Outline. Every section teaches the reasoning the exam rewards: what the IS auditor should do FIRST, which control BEST addresses a risk, and where the auditor's role ends and management's begins.

What's Inside

• Exam overview: format (150 questions, 4 hours), PSI test center and remote testing, the five domains and their weights, scaled scoring and the 450 passing score, fees, registration and scheduling, retakes, experience requirements and CPE

• Domain 1 – Information System Auditing Process: ISACA ethics and ITAF, charters and engagement letters, risk-based planning, audit risk, control types, testing, sampling, evidence, CAATs, data analytics and reporting

• Domain 2 – Governance and Management of IT: COBIT, IT strategy, segregation of duties, policies, enterprise risk management, privacy and data governance, sourcing, vendor management, SOC reports, KPIs, KRIs and quality

• Domain 3 – Acquisition, Development and Implementation: project governance, business cases and benefits, SDLC, agile and DevSecOps, application controls, testing, changeover, data conversion and post-implementation review

• Domain 4 – Operations and Business Resilience: asset and configuration management, interfaces and EUC, availability and SLAs, incident, problem, change and patch management, BIA, RTO and RPO, backups, alternate sites and DR testing

• Domain 5 – Protection of Information Assets: security frameworks, physical controls, identity and privileged access, network security, encryption, PKI, cloud, mobile and IoT, attacks, security testing, SIEM, incident response and forensics

• Worked calculations: ALE, audit risk, sample deviation rates, availability, PERT, earned value and recovery timelines

• Visuals of the domain weights, audit risk model, recovery metrics timeline and DMZ architecture, plus 126 quick-reference tables

• Exam Tips, Common Traps, Memory Aids and Practice Scenarios in every chapter

• Study schedules, FAQs and test-taking strategies

• 2 practice tests of 100 questions each (200 questions total), four options per question, weighted like the official domains (18 / 18 / 12 / 26 / 26), with a complete answer key and an explanation for every question

Format

• Instant digital download (PDF), 8.5 × 11 in

• Clickable table of contents

• Print it or study on a tablet, laptop or phone

Please note: This is a digital product. No physical item will be shipped.

CISA® is a registered trademark of ISACA. This is an independent study resource and is not affiliated with or endorsed by ISACA.