CISA Course Curriculum - The 5 Learning Domains

Domain 3 Information Systems Acquisition, Development and Implementation

Project Governance and Management Business Case and Feasibility Analysis System Development Methodologies Control Identification and Design A Information Systems Acquisition and Development

B Information Systems Implementation

System Readiness and Implementation Testing Implementation Configuration and Release Management System Migration, Infrastructure Deployment, and Data Conversion Post-implementation Review

Domain 4 Information Systems Operations and Business Resilience

A Information Systems Operations

B Business Resilience

Business Impact Analysis System and Operational Resilience Data Backup, Storage, and Restoration Business Continuity Plan Disaster Recovery Plans

IT Components IT Asset Management Job Scheduling and Production Process Automation System Interfaces Shadow IT and End-User Computing Systems Availability and Capacity Management Problem and Incident Management IT Change, Configuration, and Patch Management

Operational Log Management IT Service Level Management Database Management

CISA® Course Curriculum - The 5 Learning Domains © Scalefree International GmbH 2026

Powered by