CISA Course Curriculum - The 5 Learning Domains

Domain 5 Protection of Information Assets

A Information Asset Security and Control

B Security Event Management

Information Asset Security Frameworks, Standards, and Guidelines Physical and Environmental Controls Identity and Access Management Network and End-Point Security Data Loss Prevention Data Encryption Public Key Infrastructure Cloud and Virtualized Environments Mobile, Wireless, and Internet-of-Things Devices

Security Awareness Training and Programs Information System Attack Methods and Techniques Security Testing Tools and Techniques Security Monitoring Tools and Techniques Security Incident Response Management Evidence Collection and Forensics

CPE Overview

To maintain your CISA® certification, you need to:

Comply with the Annual CPE Audit if selected Comply with ISACA’s Code of Professional Ethics

Earn and report a minimum of 20 hours annually of Continuing Professional Education (CPE) Earn and report a minimum of 120 CPE hours every 3-year reporting cycle

Abide by ISACA’s IT Auditing Standards

Pay the CISA® annual maintenance fee ($45 for members, $85 for non-members)

CISA® Course Curriculum - The 5 Learning Domains © Scalefree International GmbH 2026

Powered by