Practise Certified Information Systems Auditor (CISA) with a short sample and answer explanations. These are independent learning materials, not official exam questions or a pass prediction.
Exam outline and official sources
ISACA · CISA Examination Content Outline effective 1 August 2024, confirmed against ISACA's current CISA outline and the 2026 Certification Exams Candidate Guide, Appendix A, on 2026-10-11. The workbook examination label matches the official credential. Assigned workbook category '6. Health Information & Coding' is retained as administrative metadata but does not describe CISA's information systems audit scope.
This original 20-question sample covers selected topics across the outline. It does not reproduce official exam questions or cover every tested topic.
- CISA Certification — Certified Information Systems Auditor
- CISA Exam Content Outline
- Exam Candidate Guides
- ISACA Certification Exams Candidate Guide, 2026
- ISACA's CISA Exam Updated to Reflect Innovations and Evolving Technologies Impacting IT Audit
- ISACA Interactive Glossary
- Information Systems Auditing: Tools and Techniques — Creating Audit Programs
- An ITAF Approach to IT Audit Advisory Services
- The Governance Game of Chess: Mapping ISO/IEC 27001:2022 to COBIT
- Performance Measurement Metrics for IT Governance
- Auditing Agile — A Brave New World
- NIST SP 800-53 Revision 5 — Publication and Update Record
- NIST SP 800-53 Revision 5: Security and Privacy Controls for Information Systems and Organizations
- NIST SP 800-34 Revision 1: Contingency Planning Guide for Federal Information Systems
- NIST SP 800-63B-4: Authentication and Authenticator Management
- NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response
- NIST SP 800-61 Revision 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management
Certified Information Systems Auditor (CISA)
Start with 20 free questions, then review the explanations and any topics you missed.
An auditor has resources to review only one application this quarter. One application recently began processing high-value transactions, has weak approval controls, and has not been reviewed since the change. Other applications are stable and have recently tested controls. What is the strongest basis for prioritizing the changed application?
Certified Information Systems Auditor (CISA)
Flashcards
Information System Auditing Process
1A1 — IS Audit Standards, Guidelines, and Codes of Ethics: audit authority
Get started with Certified Information Systems Auditor (CISA)
Purchase your plan, then choose the module to enable. Your plan renews until canceled.
Monthly exam plan
$147 / month
About $4.90 per day
Enable one exam module after payment
Published questions, flashcards and study tools
Renews until canceled
Yearly exam plan
$1337 / year
About $3.66 per day
Enable one exam module after payment
Published questions, flashcards and study tools
Renews until canceled
Found an issue? See our content policy and report a correction.