CISA-Certified Information Systems Auditor 

Future-proof your career with the CRISC® certification, the gold standard for IT risk management and business resilience. Gain the strategic edge needed to manage enterprise-wide risk while tackling the specific governance and ethical challenges posed by emerging AI technologies.

Write your awesome label here.

CISA Exam Domains

Domain Exam Weight Key Focus Areas

Domain 1: Governance 26% Organizational strategy, risk appetite, ethics, and the "Three Lines of Defense" model.

Domain 2: IT Risk Assessment 22% Identifying threats/vulnerabilities, risk analysis methodologies, and business impact analysis (BIA).

Domain 3: Risk Response & Reporting 32% Risk treatment plans, third-party risk, and monitoring metrics (KRIs, KPIs, KCIs).

Domain 4: Information Technology & Security 20% IT operations, business continuity, and emerging tech like AI and Quantum Computing.