CISA — Certified Information Systems Auditor (ISACA)
The leading credential for auditing information systems and IT controls.
Comparing options? Read ACCA vs CPA vs CMA vs CFA →Quick answer
- Best for
- The leading credential for auditing information systems and IT controls.
- Not ideal for
- If you want general accounting rather than IT/systems audit.
- Main roles
- IS/IT auditor, IT risk, and security and controls assurance.
- CPD
- ISACA requires 20 CPE hours a year and 120 over three years.
Last reviewed: June 2026
Who it's for
Auditors and IT/risk professionals moving into information-systems audit.
Structure
One exam across five domains (IS audit process, governance, acquisition & development, operations, and protection of information assets), plus relevant work experience.
Time & cost
Often around a year; self-study is common.
Careers
IS/IT auditor, IT risk, and security and controls assurance.
The skills you'll build
Many of these serve more than one path.
Best free resources for this path
Curated and vetted, with how to start.
Official CISA exam information, a free 'question of the week', and ISACA's resource library for IS audit.
How to start: Browse isaca.org; some resources need a free account or membership.
Free, CPE-eligible webcasts on tax, audit, accounting and regulation from the Big 4.
How to start: Search '<firm> webcasts / Dbriefs' and register free per session.
Free, self-paced Excel and Power BI training — essential analyst skills for any finance path.
How to start: Free with a Microsoft account; the optional PL-300 exam is paid.
Thousands of university finance/accounting courses you can audit free; financial aid for certificates.
How to start: Free account; click 'Audit', or apply for financial aid for a certificate.
Continuing professional development (CPD)
ISACA requires 20 CPE hours a year and 120 over three years.
Get these hours for free →Disclaimer
Links to third-party resources are provided for convenience and learning only. Fileminder does not control third-party content, prices, certificates, CPD/CPE eligibility, availability or accuracy. Always check the provider's own page before relying on a course, certificate, CPD unit or learning outcome. Last reviewed: June 2026.