CISA Exam: format, questions, passing score & pass rate
The CISA exam has 150 multiple-choice questions, for a total seat time of 4h. Scaled score from 200 to 800; you need 450 to pass. Pass rate: ~50% (ISACA does not publish an official figure; this is the commonly cited estimate).
The world standard for IS auditing. In high demand across cybersecurity and IT governance.
Facts at a glance
| Number of questions | 150 |
|---|---|
| Total duration | 4h |
| Format | A single 4-hour computer-based multiple-choice exam (PSI test center or remote proctoring). |
| Passing score | Scaled score from 200 to 800; you need 450 to pass. |
| Pass rate | ~50% (ISACA does not publish an official figure; this is the commonly cited estimate). |
| Cost | $575 for ISACA members, $760 for non-members. |
| Eligibility | 5 years of IS audit, control, or security experience (waivers can reduce this by up to 3 years). |
| Validity | 3 years, renewable via 120 CPE hours per cycle (20 hours/year minimum). |
| Study time (adaptive plan) | 3–5 months with an adaptive plan, ~8 hours/week. |
Domain weighting
| Domain | Exam weight |
|---|---|
| D1Information Systems Auditing Process | 18% |
| D2Governance and Management of IT | 18% |
| D3Acquisition, Development and Implementation | 12% |
| D4Operations and Business Resilience | 26% |
| D5Protection of Information Assets | 26% |
Frequently asked questions
How many questions are on the CISA exam?+
The CISA is a single exam with 150 multiple-choice questions, completed in 4 hours.
What is the CISA passing score?+
The CISA is scored on a scaled range of 200 to 800. You need a 450 to pass.
What is the CISA exam pass rate?+
ISACA does not publish an official pass rate; it is commonly estimated at around 50%. Structured prep with a large, exam-style question bank materially improves odds.
How long should I study for the CISA?+
Most candidates study 3 to 5 months at about 8 hours per week. Domains 4 and 5 carry 26% each, so weight your study toward operations, resilience, and information-asset protection.
How much does the CISA cost?+
The CISA exam costs $575 for ISACA members and $760 for non-members, excluding study materials.
Which CISA domain is most important?+
Domains 4 (Operations and Business Resilience) and 5 (Protection of Information Assets) are the heaviest, at 26% each — together more than half the exam.
Prep for the CISA with an AI tutor
3–5 months with an adaptive plan, ~8 hours/week. Adaptive plan, spaced-repetition flashcards, scored mock exams, and unlimited AuditBot. 7-day free trial, no credit card.
Sources & updates
Figures verified on May 1, 2026 against ISACA’s official documentation. Blueprints change: when an official update lands, we correct this page within 30 days. Official source ↗