CISA study plan, week by week

1. Week 1

   Learn

   Focus: Information Systems Auditing Process

   • Take the free 10-question diagnostic to see where you start
   • Flashcards for Information Systems Auditing Process, a short session every study day
   • 80 practice questions from Information Systems Auditing Process, reading every explanation and its cited source

2. Week 2

   Learn

   Focus: Governance and Management of IT, IS Acquisition, Development, and Implementation

   • Flashcards for this week's domains, a short session every study day
   • 80 practice questions from this week's domains, reading every explanation and its cited source
   • Review your flashcard queue before starting the new domain

3. Week 3

   Learn

   Focus: IS Operations and Business Resilience

   • Flashcards for IS Operations and Business Resilience, a short session every study day
   • 80 practice questions from IS Operations and Business Resilience, reading every explanation and its cited source
   • Review your flashcard queue before starting the new domain

4. Week 4

   Learn

   Focus: Protection of Information Assets

   • Flashcards for Protection of Information Assets, a short session every study day
   • 80 practice questions from Protection of Information Assets, reading every explanation and its cited source
   • Review your flashcard queue before starting the new domain

5. Week 5

   Practice

   Weighted toward: IS Operations and Business Resilience, Protection of Information Assets, Information Systems Auditing Process

   • 120 mixed questions across every domain, weighted toward IS Operations and Business Resilience
   • Redo your missed questions until each one sticks
   • Check your Readiness Read and move your time to the weakest domain it names
   • Your first mock exam (speed drill): 100 questions in 150 minutes, under the timer

6. Week 6

   Practice

   Weighted toward: Governance and Management of IT, IS Acquisition, Development, and Implementation

   • 120 mixed questions across every domain, weighted toward IS Operations and Business Resilience
   • Redo your missed questions until each one sticks
   • Check your Readiness Read and move your time to the weakest domain it names

7. Week 7

   Exam rehearsal

   Weighted toward: IS Operations and Business Resilience, Protection of Information Assets, Information Systems Auditing Process

   • Mock exam (speed drill): 100 questions in 150 minutes, under the timer
   • Review every question you missed on it, then 80 more from the domains it exposed

8. Week 8

   Exam rehearsal

   Weighted toward: IS Operations and Business Resilience, Protection of Information Assets, Information Systems Auditing Process

   • Mock exam (full length): 150 questions in 240 minutes, under the timer
   • Review every question you missed on it, then 80 more from the domains it exposed
   • The day before the exam: a light flashcard review and nothing new

Question targets assume about 3 minutes a question, including the explanation and its source. Learn weeks follow the official domain order and give heavier domains more time. Mock exams and questions beyond the free 25 need Pro.