CISA is the global benchmark for information systems auditors. This preparation covers the five domains of ISACA's exam outline, from the audit process to protecting information assets. We focus on the logic behind ISACA questions, which ask for the best answer from an auditor's point of view, through case studies and mock exams.
The essentials
Publisher : ISACA
Certification : CISA – Certified Information Systems Auditor
Duration : 5 days (35 h); intensive 4-day format available
Level : Advanced
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : 150 multiple-choice questions · 4 h · 450 on a 200–800 scale
Exam voucher: included or optional depending on the package — contact us.
Plan and run a risk-based IS audit in line with ISACA standards.
Assess IT governance and management, including vendors and performance.
Audit system acquisition, development and implementation.
Review IT operations, change management and business resilience.
Evaluate security controls: access, identity, physical security and incident handling.
Gather evidence, use data analytics and write sound findings.
Adopt the question logic specific to ISACA exams.
Program
Domain 1 – Information system auditing process (18%)
Audit planning and standards
Execution, sampling and evidence
Data analytics and reporting
Domain 2 – Governance and management of IT (18%)
Laws, organisation and policies
Resource and vendor management
Performance monitoring
Domain 3 – IS acquisition, development and implementation (12%)
Project governance
Development methodologies
Testing and implementation
Domain 4 – IS operations and business resilience (26%)
Asset, change and capacity management
Business continuity and disaster recovery
Data backup
Domain 5 – Protection of information assets (26%)
Security frameworks and controls
Identity and access management
Event monitoring and incident response
Prerequisites
No prerequisites to sit the exam.
To earn the credential, ISACA requires five years of IS audit, control or security experience gained within the ten years before applying.
Some audit or internal control background makes preparation much easier.
Target audience
Internal and external auditors, IT auditors
Internal control and compliance managers
Risk and governance consultants
Security managers who work closely with audit
The exam
The CISA exam has 150 multiple-choice questions to answer in 4 hours. Languages include English, French, Spanish, German, Simplified Chinese, Korean and Japanese. It is computer-based, taken at a PSI test center or remotely with online proctoring. Scores range from 200 to 800 and you need at least 450 to pass. ISACA allows four attempts in a rolling twelve-month period. After passing you have five years to apply for certification, then must report at least 120 CPE hours per three-year cycle, with a minimum of 20 hours each year.
Preparation tips
Think like an auditor: identify the risk, the expected control and the evidence before answering.
Give extra time to domains 4 and 5, each worth 26% of the exam.
Practise timed sets: roughly 90 seconds per question.
Frequently asked questions (FAQ)
Can I take the CISA exam in French?
Yes, French is among the languages ISACA offers for CISA. The course itself can be run entirely in French too.
Do I need five years of experience before the exam?
No. You can sit the exam first, then you have five years after passing to show the experience and apply for certification. The experience must have been gained within the ten years before you apply.
What score do I need?
At least 450 on a 200–800 scale. It is a scaled score, not a percentage of correct answers.
How do I maintain the CISA?
By reporting at least 20 CPE hours a year and 120 hours per three-year cycle, and by following ISACA's code of ethics.
Is the course available online or in Casablanca?
Both: as a live online class, in person in Casablanca, or on-site at your organization, taught in French or English.