How many questions are on the ISACA CISA exam?

The ISACA CISA exam has 150 questions, and the vendor's published description is: 150 multiple-choice questions, 4 hours.

How long do you have to complete the ISACA CISA exam?

You get 240 minutes, which is about 96 seconds per question. The published format is: 150 multiple-choice questions, 4 hours.

What score do you need to pass the ISACA CISA exam?

The passing score is 60% (450/800 scaled score).

How should I use the domain weights when revising?

Weight by percentage, not by domain. 18% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the ISACA CISA exam?

Yes: 150 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

ISACA CISA Exam Format

CISA

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. CISA is a globally recognized certification for professionals who audit, control, monitor, and assess information technology and business systems. The exam covers five domains emphasizing assurance, governance, operations, resilience, and asset protection. Exam content is aligned with current digital risk, governance, and assurance practices. The exam uses multiple-choice questions and scenario-based items that require applying audit standards and control frameworks. Successful candidates demonstrate the ability to evaluate vulnerabilities, report noncompliance, and provide value-added recommendations. Earning CISA validates skills in IT audit, cybersecurity audit, regulatory compliance, and control assurance. The credential remains a benchmark for IT audit professionals.

150 questions

240 min

60% to pass

5 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	150
Time limit	240 minutes (96s per question)
Passing score	60% — 450/800 scaled score
Domains	5
Level	Professional
Question bank here	150 questions
Published format	150 multiple-choice questions, 4 hours
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Governance and Management of IT	18%	IT governance frameworks and organizational structures Business alignment and IT strategy IT policies, standards, and procedures +4 more	27
Protection of Information Assets	26%	Information security strategy and controls Identity and access management Cryptography and public key infrastructure +5 more	39
Information Systems Auditing Process	18%	IS audit standards and professional ethics ISACA audit guidelines and frameworks Risk-based audit planning and risk assessment +4 more	27
Information Systems Operations and Business Resilience	26%	IT service management and operations procedures Incident and problem management Data backup, recovery, and storage management +4 more	39
Information Systems Acquisition, Development and Implementation	12%	Business case and feasibility analysis Project management and vendor management System development life cycle methodologies +4 more	18

The heaviest domain is Governance and Management of IT at 18%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Separate USD 50 application processing fee applies after passing. Scale is 200-800, passing is 450 or higher. Official exam page

More about the ISACA CISA exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Exam costPrice, retakes and total budget Pass rateThe score you need Who can take itRequirements and prerequisites Study planHow to prepare, by domain

Related certifications

Explore other certifications in the same category and see how they stack up.

ISC2 CGRC

ISC2

Guides and articles

More context about this certification, straight from our blog.

ISACA CISA Certification Guide: CISA Exam DetailsMaster the ISACA CISA certification: 150 questions, 4 hours, 450/800 passing score. Covers cost, domains, requirements.11 min read

Frequently asked questions

Everything you need to know about the ISACA CISA exam.

There are 5 domains: Governance and Management of IT, Protection of Information Assets, Information Systems Auditing Process, Information Systems Operations and Business Resilience, Information Systems Acquisition, Development and Implementation. The official weights are Governance and Management of IT 18%, Protection of Information Assets 26%, Information Systems Auditing Process 18%, Information Systems Operations and Business Resilience 26%, Information Systems Acquisition, Development and Implementation 12%.