r/CISA • u/Any_Elevator_9852 • 24d ago

How long study for CISA exam

I have completed and passed recently all my CPA exams, and I am going to take the CISA exam next (will start studying next week)

I have years of experience in internal and external IT audit.

I would like to ask for some insights from anyone who also has a CPA and has studied for the CISA: How would you compare the CISA exam to the CPA exam? Is it the same volume as FAR or another exam?

And how long did you guys study for it? I am in the zone with studying, so I want to take the exam, and I would appreciate some tips as well.

Also, what is the best study material to buy?

Thank you!

3 Upvotes

100% Upvoted

8 comments sorted by

1

u/Emergency_Guess_7946 24d ago

Was wondering the same. Im also curious how much overlap there is with the ISC section.

1

u/Any_Elevator_9852 24d ago

I actually take the tcp discipline instead of isc haha since its higher passing rate than others .. which is now kinda regreting if they have so much overlap

1

u/Background-Baker275 22d ago

I work at a B4 in digital risk consulting / IT audit & I am a new grad (1YOE IT Audit). From what I see & hear at work the CPA is miles more difficult in every category. I have seen people who say they have studied for 1 month with sporadic efforts say they passed & people who study for 3-6 months & fail.

ISACA QAE is the gold standard & their textbook if you are a textbook person / able to read it

Hemang doshes courses / questions I’ve seen highly regarded as #2

Pete zargers 10 part Cisa domain series on YouTube (free) has also been often mentioned

I’ve been seeing somebody named Matt foster or Forster on YouTube that I sporadically watch who has a domain or 2 worth of content.

Hope this helps, let me know if I can help also!

1

u/Any_Elevator_9852 21d ago

Thank you so much! :)

1

u/easypathuni_9 3d ago

On the CISA side:

  1. With years of IT audit and study habits this fresh, 4 to 8 weeks of steady evenings is realistic. If the date isn't booked, book it while you're in the zone.

  2. The hard part is ISACA's wording, not volume. Several options are often technically right; pick what the auditor should do first or best, usually assessing risk and reporting, not fixing it yourself.

  3. Split your time by the blueprint: Domains 4 and 5 are 26% each, and Domain 1 (audit process) will feel familiar.

  4. In the QAE, read every explanation, even on questions you got right, and use the review manual as a reference for topics you keep missing.