BI, Guide
The 5 Learning Domains CISA® Course Curriculum
Domain 1 Information Systems Auditing Process
A Planning
B Execution
IS Audit Standards, Guidelines, and Codes of Ethics Types of Audits, Assessments, and Reviews Risk-Based Audit Planning Types of Controls and Considerations
Audit Project Management Audit Testing and Sampling Methodology Audit Evidence Collection Techniques Audit Data Analytics Reporting and Communication Techniques Quality Assurance and Improvement of Audit Process
Domain 2 Governance and Management of IT
A IT Governance
B IT Management
IT Resource Management IT Vendor Management IT Performance Monitoring and Reporting Quality Assurance and Quality Management of IT
Laws, Regulations, and Industry Standards Organizational Structure, IT Governance, and IT Strategy IT Policies, Standards, Procedures and Practices Enterprise Architecture and Considerations
Enterprise Risk Management Privacy Program and Principles Data Governance and Classification
CISA® Course Curriculum - The 5 Learning Domains © Scalefree International GmbH 2026
Domain 3 Information Systems Acquisition, Development and Implementation
Project Governance and Management Business Case and Feasibility Analysis System Development Methodologies Control Identification and Design A Information Systems Acquisition and Development
B Information Systems Implementation
System Readiness and Implementation Testing Implementation Configuration and Release Management System Migration, Infrastructure Deployment, and Data Conversion Post-implementation Review
Domain 4 Information Systems Operations and Business Resilience
A Information Systems Operations
B Business Resilience
Business Impact Analysis System and Operational Resilience Data Backup, Storage, and Restoration Business Continuity Plan Disaster Recovery Plans
IT Components IT Asset Management Job Scheduling and Production Process Automation System Interfaces Shadow IT and End-User Computing Systems Availability and Capacity Management Problem and Incident Management IT Change, Configuration, and Patch Management
Operational Log Management IT Service Level Management Database Management
CISA® Course Curriculum - The 5 Learning Domains © Scalefree International GmbH 2026
Domain 5 Protection of Information Assets
A Information Asset Security and Control
B Security Event Management
Information Asset Security Frameworks, Standards, and Guidelines Physical and Environmental Controls Identity and Access Management Network and End-Point Security Data Loss Prevention Data Encryption Public Key Infrastructure Cloud and Virtualized Environments Mobile, Wireless, and Internet-of-Things Devices
Security Awareness Training and Programs Information System Attack Methods and Techniques Security Testing Tools and Techniques Security Monitoring Tools and Techniques Security Incident Response Management Evidence Collection and Forensics
CPE Overview
To maintain your CISA® certification, you need to:
Comply with the Annual CPE Audit if selected Comply with ISACA’s Code of Professional Ethics
Earn and report a minimum of 20 hours annually of Continuing Professional Education (CPE) Earn and report a minimum of 120 CPE hours every 3-year reporting cycle
Abide by ISACA’s IT Auditing Standards
Pay the CISA® annual maintenance fee ($45 for members, $85 for non-members)
CISA® Course Curriculum - The 5 Learning Domains © Scalefree International GmbH 2026
Page 1 Page 2 Page 3Powered by FlippingBook