CISA Syllabus and Exam Format in 2026: Domains, Weightage, Scoring, Scheduling and Study Plan
If you want the broader CISA exam blueprint, this is the right page to start with. It covers the current format, the live ISACA domain weights, how scoring and scheduling work, what the syllabus is really testing, and how to turn the outline into a realistic study plan.
Quick answer
The current CISA exam is a 150-question computer-based exam that must be completed in 4 hours and is structured around 5 job practice domains. The current ISACA exam content outline weights those domains at 18%, 18%, 12%, 26%, and 26%, while the certification path itself also depends on how you plan scoring, scheduling, practice, and revision.
Key takeaways
- This page should own broad `cisa syllabus` and `cisa exam syllabus` intent, not just repeat domain descriptions.
- The current blueprint is not evenly weighted, so the right study plan should not be evenly split either.
- Domains 4 and 5 together make up 52% of the live outline, but Domain 1 and 2 still matter heavily because they shape answer logic.
- CISA preparation is easier when you separate three jobs: understand the format, map the syllabus, and plan the exam route.
- If you only want the domain-by-domain explanation, the better companion page is CISA Exam Format and Domains Explained.
Which page should you use: this one or the domains guide?
This is the cleanest way to separate the two CISA posts so you do not waste time on the wrong one. This page is the broader exam-blueprint owner. The other page is the narrower domain-explanation page.
Best next read: If you want the narrower breakdown of what each domain is actually testing, move next to the domain-by-domain CISA explainer. If your focus is execution, pair this page with the CISA first-attempt study plan.
| If you want to know… | Best page | Why |
|---|---|---|
| the full syllabus, format, scoring, scheduling, and study-planning route | This page | It is designed as the broader owner for `cisa syllabus` and full exam blueprint intent. |
| what each of the 5 domains actually means and how to prioritize them | CISA Exam Format and Domains Explained | That page is the better answer for pure domain-intent searches such as `cisa domains` and `5 domains of cisa`. |
What is the current CISA exam format?
The current live ISACA CISA credential and exam-content pages confirm a 150-question, 4-hour, computer-based exam built around five job-practice domains. ISACA also states that candidates register into a six-month eligibility window and schedule their exam through PSI, either at an authorized test center or via remote proctoring where available.
| Exam element | Current CISA format | Why it matters |
|---|---|---|
| Question count | 150 multiple-choice questions | The exam rewards pacing plus judgment, not just knowledge. |
| Duration | 4 hours | Strong candidates still need a time plan and not just content preparation. |
| Delivery | Computer-based | Mock practice should feel decision-oriented and screen-based. |
| Scheduling | PSI test center or remote proctoring, based on current ISACA/PSI availability | Logistics should be part of the study plan early, not a final-week scramble. |
| Eligibility period | 6 months after registration | You need a study timeline that fits the actual exam window. |
Official references: ISACA CISA credential page and ISACA CISA Exam Content Outline.
What does the current CISA syllabus actually cover?
The CISA syllabus is not just a list of chapters. It is a blueprint of how ISACA expects an information systems auditor to think across audit process, governance, system change, operations, resilience, and protection of information assets. In plain language, the exam sits at the intersection of audit judgment, business context, controls logic, and technology understanding.
Current CISA domain weightage
The current live ISACA content outline weights the five CISA domains at 18%, 18%, 12%, 26%, and 26%. That weighting matters because it tells you where your study plan should get heavier and where equal-time preparation becomes inefficient.
| Domain | Current weight | What it broadly covers |
|---|---|---|
| Domain 1: Information Systems Auditing Process | 18% | Audit planning, evidence, execution, reporting, and follow-up. |
| Domain 2: Governance and Management of IT | 18% | Governance structures, IT strategy, risk oversight, and management quality. |
| Domain 3: Information Systems Acquisition, Development and Implementation | 12% | Projects, change, development, acquisition, implementation, and control points. |
| Domain 4: Information Systems Operations and Business Resilience | 26% | Operations, resilience, continuity, recovery, and service stability. |
| Domain 5: Protection of Information Assets | 26% | Access, data protection, monitoring, and information-asset safeguarding. |
The practical message is simple: if your revision plan is flat, it is not aligned to the live blueprint.
How does scoring and passing work?
Candidates usually search for syllabus and format together because they are really trying to understand one thing: how hard it is to convert preparation into a pass. The broad answer is that CISA uses a scaled scoring model, so the goal is not to “ace” one part and ignore another. The goal is consistent judgment quality across the full blueprint.
What should you know about scheduling, PSI and remote proctoring?
This is one of the biggest differences between a full syllabus owner page and a simple domains page. Searchers looking for `cisa exam syllabus` often also want to know what the actual exam route feels like in practice. ISACA’s current certification information says CISA registration is continuous, the eligibility period lasts six months from registration, and scheduling is done through PSI.
- register only when you have a realistic study timeline, not just initial motivation
- confirm whether you will use a test center or remote proctoring based on current PSI availability
- do not leave identification, room requirements, or technical checks until the final week
- plan your mocks backward from your scheduled exam date, not forward from vague intentions
Official source: ISACA CISA credential page.
How should you turn the syllabus into a study plan?
A good CISA study plan has three stages: understand the blueprint, build coverage across all five domains, and then intensify question-based revision where the weight and your weaknesses overlap.
| Study stage | What to do | Why it helps |
|---|---|---|
| Stage 1: Blueprint orientation | Understand the format, 5 domains, weights, passing logic, and exam route. | Reduces confusion and makes later reading more efficient. |
| Stage 2: Coverage build | Work through all domains with notes, examples, and concept-level question practice. | Prevents blind spots across lighter-weight and heavier-weight areas alike. |
| Stage 3: Weighted revision | Shift heavier practice attention to Domains 4 and 5 while tightening weak logic in Domains 1 and 2. | Matches the real blueprint more closely and improves score efficiency. |
If you divide time evenly across all five domains, you ignore both the current weighting and your own weak areas. That usually feels tidy, but it is rarely the strongest route.
A practical 12-week CISA study framework
This is not the only valid route, but it is a sensible default for many working professionals who want a balanced plan tied to the actual exam structure.
How this page fits inside the CISA blog cluster
This page should be the broad owner for `cisa syllabus` and full exam-blueprint intent. From here, readers should naturally branch into the more specific follow-up questions they actually have.
Need a structured CISA study route instead of building the blueprint alone?
EduDelphi’s online CISA course is built for working professionals who want guided structure across the syllabus, question practice, revision support, and a clearer route from blueprint to exam day.
Frequently asked questions
What is the current CISA syllabus?
The current CISA syllabus is based on five job-practice domains covering audit process, governance and management of IT, acquisition and implementation, operations and business resilience, and protection of information assets. The exact live weighting should always be checked on ISACA’s official exam content outline.
How many questions are on the CISA exam?
The current CISA exam has 150 multiple-choice questions and a 4-hour time limit.
Which CISA domains carry the highest weight?
Domains 4 and 5 currently carry the highest weight at 26% each, based on the live ISACA exam content outline.
Should I study the syllabus and the domains on the same page?
You can, but the cleaner path is to use this page for the broader blueprint and then move to the domains guide if you want the more detailed domain breakdown.
How long is the CISA registration eligibility period?
ISACA currently states that CISA exam registration creates a six-month eligibility period. Always verify the latest rule directly from ISACA before registering.
Where do I schedule the CISA exam?
CISA scheduling is currently handled through PSI. Depending on current availability and policy, candidates may use an authorized test center or remote proctoring.
Looking for a CISA course in your country?
If you want delivery details rather than the global exam blueprint, use the localized course pages below.
