Question 1Quality assurance and improvement of the audit process
During a quality review of a manufacturer's IS audit function, which observation is the GREATEST concern?
What experience do you need for the CISA?
Five or more years of professional information systems auditing, control or security work, gained within the 10 years before you apply. You can take the exam before you have it.
| Experience | Five years in IS audit, control or security |
|---|---|
| Window | Gained within the last 10 years |
| Apply after passing | Within five years |
| Application fee | US$50 |
Taking the exam first
The exam is open to anyone. If you pass before you have the experience, you have five years from passing to meet the requirement and apply for certification.
After you pass
- Pay the one-time US$50 application processing fee once your official score is released.
- Submit the application with your experience verified by your supervisor or manager.
- Keep the certification with at least 120 CPE hours in each three-year period and at least 20 a year, and follow ISACA's Code of Professional Ethics.
Try 3 questions
Question 2IT vendor management
A school district's contract with its outsourced help desk says only that the vendor will respond 'promptly' to incidents. What is the GREATEST concern?
Question 3Identity and access management
Next step
Questions people ask
Can I take the CISA without five years of experience?
Yes. The exam is open to anyone; you then have five years from passing to gain the experience and apply.
What kind of experience counts?
Professional information systems auditing, control or security work as described in the CISA job practice areas, gained within the 10 years before you apply.
How do I keep the CISA once I have it?
Earn at least 120 CPE hours in each three-year period, with at least 20 a year.