Domain 1 — Information Systems Auditing Process
- Audit standards, guidelines, and professional ethics
- Audit types, assessments, and reviews
- Risk-based audit planning and control evaluation
- Audit project management, testing, and sampling
- Evidence gathering and audit data analytics
- Audit reporting, communication, and quality improvement
Domain 2 — Governance & Management of IT
- Laws, regulations, and industry requirements
- IT governance structures and IT strategy alignment
- IT policies, standards, procedures, and practices
- Enterprise architecture and organizational design
- Enterprise risk management and IT risk ownership
- Privacy, data governance, and data classification
- IT resources, vendors, performance, and quality management
Domain 3 — Information Systems Acquisition, Development & Implementation
- Project governance and project management
- Business cases and feasibility assessment
- Systems development approaches and life-cycle controls
- Identifying and designing appropriate controls
- Readiness reviews and implementation testing
- Release management, migration, deployment, and data conversion
- Post-implementation review
Domain 4 — Information Systems Operations & Business Resilience
- IT infrastructure components and asset management
- Production scheduling, automation, and system interfaces
- Availability, capacity, and service-level management
- Incident, problem, change, configuration, and patch management
- Operational logs, databases, shadow IT, and end-user computing
- Business impact analysis and operational resilience
- Backups, restoration, business continuity, and disaster recovery
Domain 5 — Protection of Information Assets
- Security frameworks, policies, standards, and controls
- Physical and environmental safeguards
- Identity and access management
- Network, endpoint, cloud, mobile, and IoT security
- Data protection, encryption, public-key infrastructure, and DLP
- Security awareness, threats, vulnerabilities, and testing
- Monitoring, incident response, forensics, and evidence handling
Ready to test your knowledge?
Our comprehensive question bank is organised by the official CISA syllabus, so you can practice with confidence. Prepare for the CISA exam with thousands of free multiple-choice questions and instant scoring. Start your free trial today and access every topic listed above.