Skip to content
CBT Nuggets
DemoBook a Demo
ISACAProfessional

CISA – Certified Information Systems Auditor

Standardize your team on CISA – Certified Information Systems Auditor with a structured ISACA training path — team admin reporting included on every CBT Nuggets Teams seat.

Book a DemoAll ISACA certs
1
Course
7
Core skills
$575 for ISACA members, $760 for non-members
Exam fee (ISACA)
Security operations center analysts monitoring threat dashboards
Difficulty
Difficulty: 4 of 5 (Advanced)
Advanced
Exam fee (ISACA)
$575 for ISACA members, $760 for non-members
Courses on path
1
Official source
ISACA’s official exam page
Exam code
  • CISA

Exam datasheet

Format
Multiple choice
Prerequisites
None, but five years of professional experience in information systems auditing, control, or security is required for certification
Recommended experience
5 years of professional experience in information systems auditing, control, or security
Recertification
3 years
Testing center

Exams

Exams for this certification

Exam fees per engineer, paid to the exam vendor$575 for ISACA members, $760 for non-members

Exam — Required

Every engineer on the CISA – Certified Information Systems Auditor path takes CISA.

  1. CISACertified Information Systems Auditor (CISA)
    Exam fee
    $575 for ISACA members, $760 for non-members
    Exam length
    4 hours
    Questions
    150
    Passing score
    450 out of 800

    Exam blueprint: CISA

Skills your team builds

Information Systems AuditingGovernance and Management of ITInformation Systems AcquisitionDevelopmentand ImplementationInformation Systems Operations and Business ResilienceProtection of Information Assets

Training path

Your team's training path

One CBT Nuggets course covers the full CISA – Certified Information Systems Auditor path. Your team can start today and have admin reporting visible from day one.

  1. Start here · primary course

    CISA

    This CISA online training prepares you for the Certified Information Systems Auditor certification. The course follows ISACA’s exam blueprint: you’ll learn audit standards and risk‑based planning, manage IT governance and strategy, guide systems through acquisition, development and implementation, oversee operations and business resilience, and protect information assets. Build hands‑on skills in evidence collection, analytics and reporting through engaging videos, practice exams, and real‑world scenarios, all while preparing for the CISA exam.

    Bob Salmans
    123 videos14h
    Open course

Every certification course includes

  • Expert-led video training
  • Per-team completion reporting

ISACA career ladder

Where CISA – Certified Information Systems Auditor sits in your team's ISACA progression

The cert your team is on now, plus the levels above and below. Use this to map an engineer's next-step credential or to plan headcount coverage across tiers.

  1. Associate level

    1 cert

    ISACA Cybersecurity Fundamentals (ITCA)

    ITCA

  2. Professional level

    3 certs

    CISA – Certified Information Systems Auditor

    CISA

    You are here

    CISM – Certified Information Security Manager

    CISM

    CRISC – Certified in Risk and Information Systems Control

    CRISC

Customer outcome

Build CISA capability across the whole team, not one engineer

Assign the CISA – Certified Information Systems Auditor course to the engineers who need it, and the team report shows who has started, who has finished — the view leadership uses to see ISACA skills coverage across the team and where the gaps are.

See team pricing

Team capability

Make CISA a number on your team capability sheet, not a single engineer’s certificate.

Standardizing your team on CISA gives leadership a clear picture of ISACA skills coverage — who has completed the training, who is still on the path, and where the gaps are — so staffing and escalation plans rest on known capability instead of on one engineer.

Credential: CISA – Certified Information Systems Auditor

Exam
  • CISA

Frequently asked questions about CISA – Certified Information Systems Auditor training

Common questions IT directors ask when evaluating CISA – Certified Information Systems Auditor training for their team.

How does CISA fit into our internal compliance and governance program?

IT leaders often cite CISA when documenting that the people who plan and run IS audits, evaluate IT governance, and test security controls hold an audit-specific credential from ISACA. CBT Nuggets team reporting adds per-learner progress, completion, and completion exports for audit evidence. The formal mapping of the credential to a specific control framework comes from the auditor's crosswalk, not from the certification itself.

Who on the team should hold CISA, and what can a certified team own?

CISA suits internal IT auditors, risk and control analysts, and the security or governance staff who work alongside external auditors. Based on the linked course lessons, a certified team can own IS audit planning and execution, IT governance and project governance reviews, evaluations of system development and implementation, operations and business resilience assessments, and control testing across identity and access management, network and endpoint security, data classification and encryption, and business application security.

What does CBT Nuggets CISA – Certified Information Systems Auditor training include for a team?

CBT Nuggets CISA – Certified Information Systems Auditor courses are built by named expert trainers. Where a course includes hands-on virtual labs or a practice exam mapped to ISACA's published exam objectives, the course list on this page says so. Team admin reporting tracks assignment, completion and exam readiness per engineer — the view managers use to run a team training program.

How do I assign and track CISA – Certified Information Systems Auditor training for my team?

From the admin console, managers assign the CISA – Certified Information Systems Auditor courses directly to specific engineers or role groups and track completion and practice-exam scores per learner. Team-wide reporting rolls up to a single dashboard you can review or export for leadership reviews or compliance reporting.

How long does it take to certify a team on CISA?

The linked CBT Nuggets courses come to about 14 hours of video. The total time to certify depends on each team member's starting point in IS audit, governance, and security controls, so IT leaders typically assign the course with a target date and track progress and completion in team reporting.

What if ISACA updates the CISA – Certified Information Systems Auditor exam objectives?

CBT Nuggets updates ISACA course content as exam objectives refresh, and this page shows the current exam's status and any retirement date the vendor has announced. When ISACA restructures or renames a track, the assigned training stays aligned with the same team training plan, and the training stays current without anyone losing their progress mid-stream.

Ready to CISA – Certified Information Systems Auditor-certify your team?

Build CISA – Certified Information Systems Auditor capability across your team

See how CBT Nuggets helps IT leaders plan and track CISA – Certified Information Systems Auditor training across the team — reporting included.

Book a Demo