CISA Certification Training 2026 | ISACA Exam Preparation Course

Certification Planner’s CISA Certification Training is a comprehensive instructor-led program designed to help professionals develop the auditing, governance, risk management, compliance, and information systems control knowledge required to successfully prepare for the Certified Information Systems Auditor (CISA) certification exam offered by ISACA.

This curriculum is aligned with the latest ISACA CISA Exam Content Outline (ECO), including the updated domain weightings introduced by ISACA. The course covers all five CISA domains and focuses on developing the audit mindset, governance perspective, and risk-based decision-making approach expected of information systems auditors.

Day 1 – Information Systems Auditing Process

Domain 1: Information Systems Auditing Process (18%)

Audit Fundamentals

• IS Audit Standards & Guidelines

• Audit Charter & Independence

• Audit Planning Methodologies

• Risk-Based Audit Planning

• Audit Objectives & Scope

• Audit Evidence Collection

Conducting Information Systems Audits

• Audit Procedures

• Audit Sampling Techniques

• Data Collection & Analysis

• Control Testing Methods

• Audit Documentation

• Audit Reporting

Audit Governance & Professional Ethics

• ISACA Code of Professional Ethics

• Professional Judgment

• Audit Quality Assurance

• Auditor Responsibilities

Practical Audit Exercises

• Audit Planning Workshops

• Risk Assessment Activities

• Audit Findings Analysis

• Case Study Discussions

Day 2 – Governance, IT Management & Systems Development

Domain 2: Governance and Management of IT (18%)

IT Governance Frameworks

• Enterprise Governance

• COBIT Framework Concepts

• Governance Structures

• Strategic Alignment

• IT Policies & Procedures

• Performance Monitoring

Risk Management & Compliance

• Enterprise Risk Management

• Regulatory Compliance

• Internal Controls

• Third-Party Risk Management

• IT Resource Management

Domain 3: Information Systems Acquisition, Development & Implementation (12%)

Systems Development Lifecycle (SDLC)

• Project Governance

• Business Requirements

• Solution Acquisition

• Vendor Management

• System Development Controls

Change & Implementation Management

• Testing Methodologies

• Change Management Controls

• System Migration Controls

• Post-Implementation Reviews

• Project Success Measurements

Practical Workshops

• Governance Assessment Exercises

• SDLC Control Reviews

• Project Audit Scenarios

Day 3 – Operations, Resilience & Information Asset Protection

Domain 4: Information Systems Operations and Business Resilience (26%)

IT Operations Management

• IT Service Management

• Operational Controls

• Incident Management

• Problem Management

• Capacity Management

• Performance Monitoring

Business Resilience

• Business Continuity Planning (BCP)

• Disaster Recovery Planning (DRP)

• Recovery Strategies

• Resilience Testing

• Crisis Management

Security Operations

• Security Monitoring

• Logging & Alerting

• Incident Response

• Operational Risk Management

Domain 5: Protection of Information Assets (26%)

Information Security Fundamentals

• Information Asset Classification

• Data Protection

• Security Governance

• Information Security Controls

Access & Identity Management

• Authentication

• Authorization

• Privileged Access Management

• Identity Lifecycle Management

Infrastructure & Application Security

• Network Security Controls

• Endpoint Security

• Cloud Security Concepts

• Application Security Controls

Privacy & Data Protection

• Privacy Regulations

• Data Handling Requirements

• Data Retention & Disposal

• Information Asset Protection

CISA Exam Preparation Workshop

Exam Strategy & Readiness

• CISA Exam Structure

• ISACA Question Interpretation

• Audit Mindset Development

• Risk-Based Decision Making

• Time Management Techniques

• Domain Weighting Strategy

Practice Questions & Mock Reviews

• Domain-Based Practice Questions

• Scenario-Based Audit Discussions

• Governance & Risk Scenarios

• Exam Readiness Assessment

Final Review Session

• Key Concepts Across All Domains

• Frequently Tested Topics

• Common Exam Pitfalls

• Instructor-Led Q&A

Included Learning Resources

• Updated CISA Course Materials

• Instructor-Led Training

• Domain-Based Reviews

• Practice Questions

• Mock Exam Discussions

• Audit Case Studies

• Governance & Risk Management Scenarios

• Exam Preparation Resources

• Post-Class Study Guidance

Learning Outcomes

Upon successful completion of this CISA Certification Training, participants will be able to:

• Apply IS audit standards and methodologies

• Conduct risk-based information systems audits

• Evaluate IT governance and management frameworks

• Assess system acquisition, development, and implementation controls

• Review business resilience and disaster recovery capabilities

• Evaluate information security and asset protection controls

• Identify and assess IT risks and control deficiencies

• Prepare confidently for the CISA certification examination

• Think and make decisions from an auditor's perspective

CISA Domains Covered

The curriculum covers all five domains of the latest ISACA CISA Exam Content Outline:

1. Information Systems Auditing Process (18%)

2. Governance and Management of IT (18%)

3. Information Systems Acquisition, Development and Implementation (12%)

4. Information Systems Operations and Business Resilience (26%)

5. Protection of Information Assets (26%)

These domains and weightings reflect the current ISACA CISA Exam Content Outline and professional job practice areas for information systems auditors.

CISA Certification Exam Information

The Certified Information Systems Auditor (CISA) certification is one of the most respected and globally recognized credentials for professionals working in information systems auditing, IT governance, risk management, compliance, cybersecurity, and information security.

Offered by ISACA, the CISA certification validates a professional's ability to assess vulnerabilities, evaluate controls, monitor compliance, manage risks, and support the governance of enterprise information systems. Since its introduction in 1978, CISA has become the preferred certification for IT auditors, risk professionals, compliance specialists, and governance practitioners worldwide.

Certification Planner's CISA Exam Preparation Training is aligned with the latest ISACA CISA Exam Content Outline (ECO) and prepares participants to confidently pursue the CISA certification examination.

CISA Examination Overview

Exam Details

• Certification: Certified Information Systems Auditor (CISA)

• Certification Provider: ISACA

• Exam Format: Computer-Based Examination

• Question Format: Multiple Choice Questions

• Number of Questions: 150 Questions

• Exam Duration: 4 Hours (240 Minutes)

• Passing Score: 450 out of 800

• Exam Language Options:

  • English

  • Spanish

  • Chinese Simplified

  • Japanese

  • Korean

  • Additional languages as offered by ISACA

• Exam Delivery:

  • PSI Testing Centers

  • Online Remote Proctored Testing

• Open Book / Closed Book: Closed Book Exam

Exam Registration & Scheduling

The CISA exam is offered throughout the year, allowing candidates to schedule their examination based on availability and readiness.

Candidates can:

• Schedule an exam at an authorized PSI testing center.

• Take the examination through ISACA's remote proctoring platform from home or office.

• Reschedule or manage appointments through their ISACA certification account, subject to ISACA policies.

This year-round testing model provides flexibility for professionals preparing around work and personal commitments.

Exam Scoring Methodology

ISACA uses a scaled scoring model for the CISA examination.

• Minimum Passing Score: 450

• Score Range: 200–800

A score of 450 or higher represents the minimum standard of knowledge required to demonstrate competency in information systems auditing, governance, risk management, and information security.

Candidates receive official score reports from ISACA after completing the examination.

CISA Job Practice Domains

The CISA examination evaluates knowledge across five job practice domains defined by ISACA.

Domain 1: Information Systems Auditing Process (18%)

• Audit Planning

• Audit Execution

• Audit Reporting

• Audit Evidence Collection

• Audit Standards & Methodologies

Domain 2: Governance and Management of IT (18%)

• IT Governance Frameworks

• Strategic Alignment

• IT Policies & Procedures

• Risk Management

• Compliance Programs

Domain 3: Information Systems Acquisition, Development and Implementation (12%)

• Project Governance

• Systems Development Lifecycle

• Change Management

• Solution Acquisition Controls

• Implementation Reviews

Domain 4: Information Systems Operations and Business Resilience (26%)

• IT Operations Management

• Business Continuity Planning

• Disaster Recovery

• Incident Management

• Operational Controls

Domain 5: Protection of Information Assets (26%)

• Information Security Controls

• Access Management

• Network Security

• Data Protection

• Privacy & Confidentiality

These domains represent the knowledge areas required for modern information systems auditors and governance professionals.

CISA Certification Experience Requirements

To earn the CISA certification, candidates must:

• Pass the CISA examination.

• Comply with ISACA's Code of Professional Ethics.

• Agree to ISACA's Continuing Professional Education (CPE) requirements.

• Submit an application for certification.

• Demonstrate five years of professional work experience in information systems auditing, control, assurance, or security.

ISACA offers certain substitutions and waivers for qualifying education and professional experience as outlined in the official certification requirements.

Professionals may take and pass the examination before meeting the experience requirements and apply for certification once the required experience is obtained.

Exam Preparation with Certification Planner

Certification Planner's CISA Training Program helps candidates understand both the technical and audit-focused thinking required for examination success.

Participants receive:

• Updated CISA Course Materials

• Domain-Based Knowledge Reviews

• Practice Questions

• Mock Exam Discussions

• Audit Case Studies

• Governance & Risk Management Scenarios

• Exam-Taking Strategies

• Instructor-Led Q&A Sessions

The training emphasizes how ISACA expects auditors and governance professionals to assess controls, evaluate risk, and make objective business-focused decisions.

Continuing Professional Education (CPE)

After earning the CISA certification, professionals must maintain their credential through ISACA's Continuing Professional Education (CPE) program and annual maintenance requirements.

Maintaining certification demonstrates ongoing commitment to professional development and staying current with evolving audit, governance, cybersecurity, and compliance practices.

Why CISA Certification Matters

CISA is considered the benchmark certification for information systems auditing and governance professionals.

Organizations around the world actively seek CISA-certified professionals for roles such as:

• Information Systems Auditor

• IT Auditor

• Internal Auditor

• IT Risk Manager

• Governance, Risk & Compliance (GRC) Specialist

• Information Security Auditor

• Compliance Manager

• Audit Manager

• Cybersecurity Auditor

• Controls Assurance Professional

As regulatory requirements, cybersecurity risks, and governance expectations continue to increase, the demand for qualified CISA-certified professionals remains strong across virtually every industry.

Certification Planner's CISA Exam Preparation Training provides the knowledge, audit mindset, and exam preparation resources needed to confidently pursue one of the world's most respected IT audit certifications.