CISA

Certified Information Systems Auditor (CISA) is the leading credential for auditing information systems and IT controls.

Who it's for

Auditors and IT/risk professionals moving into information-systems audit.

Structure

One exam across five domains:

• IS audit process
• Governance
• Acquisition & development
• Operations
• Protection of information assets

Plus relevant work experience.

Continuing Professional Development (CPD)

ISACA requires 20 CPE hours a year and 120 over three years.

Time & Cost

Often around a year; self-study is common.

Careers

• IS/IT auditor
• IT risk
• Security and controls assurance

Skills You'll Build

• IS audit
• IT governance
• Risk & controls
• Security of information assets
• Systems acquisition & operations

Best Free Resources for This Path

• ISACA — CISA resources: Official CISA exam information, a free 'question of the week', and ISACA's resource library for IS audit. How to start: Browse isaca.org; some resources need a free account or membership.
• Big 4 free webcasts (Deloitte/PwC/EY/KPMG): Free, CPE-eligible webcasts on tax, audit, accounting, and regulation. How to start: Search 'webcasts / Dbriefs' and register free per session.
• Microsoft Learn — Excel & Power BI: Free, self-paced Excel and Power BI training — essential analyst skills for any finance path. How to start: Free with a Microsoft account; the optional PL-300 exam is paid.
• Coursera & edX: Thousands of university finance/accounting courses you can audit free; financial aid for certificates. How to start: Free account; click 'Audit', or apply for financial aid for a certificate.

See the full free-resource library

Paths You Might Also Consider

• CIA: The leading global credential for internal auditors.
• FRM: The leading global credential for financial risk management.
• CFE: The standard for fraud examination, investigation, and prevention.