AdvancedAuditGovernance and risk

CISA

Certified Information Systems Auditor · ISACA

The CISA is the global benchmark for information systems auditors: it proves you can plan and run an IT audit, assess governance, acquisition projects, operations, resilience and the protection of information assets. Audit firms, internal audit departments, banks and insurers ask for it routinely, in France as internationally. Its strength is unrivalled recognition in audit and control; its limit is that it is not a technical security credential and requires five years of verified experience.

Exam
150 multiple-choice questions in 4 h, scaled score from 200 to 800 with a pass mark of 450. In a PSI test centre or online with remote proctoring.
Exam price
$575ISACA member price; non-members pay US$760. A US$50 application fee is due when applying for certification after passing.
Required experience
Five years in IS audit, control, assurance or security, within the ten years before applying (apply within five years of passing). Waivers of up to three years (degrees, general audit experience), keeping at least two years of direct experience.
Validity and maintenance
At least 20 CPE hours per year and 120 over 3 years, plus an annual fee of US$45 (members) or US$85 (non-members).
Format
Multiple choice
Recognition
ISO/IEC 17024 accredited · DoD 8140 approved

Who is it for?

IT auditors, internal auditors, control and compliance staff, and consultants in audit firms who already have, or are building, several years of audit experience.

Domains covered

  • Information systems auditing process: 18%
  • Governance and management of IT: 18%
  • IS acquisition, development and implementation: 12%
  • IS operations and business resilience: 26%
  • Protection of information assets: 26%

Belinda’s take

Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.

Official site

The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.

All certifications

From theory to practice

So how does your system measure up?

Create your account and get an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Run the audit from your account: an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Belinda

Contact us

A question, a project, a partnership? Write to us: the team answers by email, usually within one business day.

Your details are only used to answer you. Do not include passwords or vulnerability details.