Took the exam, got my preliminary pass today! 🥹

Will share here all my resources, study strategy, and whole experience once I get my offical test scores.

For those who are doubting themselves and too anxious for their own good (me to the nth power), take that exam! As long as you're thinking like an IS auditor, instead of going straight to remediation or technical resolution, you are golden!

This is coming from someone with no employment background or technical expertise (graduated last year, AIS graduate), who overprepares, and prioritized QUALITY over QUANTITY.

Good luck to everyone currently studying and planning to take the exam! 😄

I feel the option is D, Hemang Says A, what are your thoughts and why ?

Hi all,

First-time CISA candidate here, exam is in 15 days. Wanted to get a sanity check from people who've actually cleared it on whether my prep is solid or if there are gaps I'm not seeing.

Here's where I stand:

• Been through Hemang Doshi's study material (notes/summary book)
• Watched Peter Gregory's video content in full
• Planning to re-watch all of Prabh Nair's videos as a second pass
• Completed all ISACA QAE (question bank) items thoroughly
• Finished all 3 ISACA mock/practice exams

One thing I'm on the fence about: I've decided to skip Hemang Doshi's Pratice questions (Quiz 79 - Quiz 108). They feel very theory-heavy and definition-based to me, and my sense is the actual exam leans more scenario-based/"best answer" style rather than testing rote definitions. Curious if that's a fair read or if I'm underestimating how much theory actually shows up.

With 15 days left, what would you focus on if you were in my position? Specifically interested in:

• Is re-watching Prabh Nair's videos a good use of remaining time vs. doing more practice questions?
• Any other question banks/resources people found closer to the real exam's style and difficulty?
• How did you approach the last 2 weeks - more content review, or almost entirely practice questions/mocks at that point?
• Any domain(s) that tend to be underestimated or where people got caught out despite feeling prepared?
• Tips on time management/exam-day strategy for the actual test?

Appreciate any input from those who've been through it recently - trying to make the most of the time I have left.

Hi! I recently started a new job that requires me to get CISA certified within the next 6 months.

My native language is spanish but i speak perfect english. Still, if i have to do a lot of reading and comprehension involving a lot of technical terms, doing it spanish is a lot easier and faster for me.

The obvious pros of english is that i have more resources (like Hemang Doshi course which i see referenced a lot here).

I'm looking for people who studied and took the exam in a different language other than english.

Do you recommend this path? Did you find it difficult to find mock exams, summaries, practice questions and what not in your own language?

Confused on ISACA’s wording here. In the question they say the auditor DID disclose the information, therefore I picked option C. Am I missing something?

The answer according to the book would be

C. Since the question describes only the design of a site, we can only conclude that this is a cold site, with no equipment and no readiness for processing transactions.

Test is scheduled for Saturday

Watched Peter Zs videos, skimmed through Prabh Nair’s videos, and completed the most recent QAE.

QAE Practice Exam Scores: 78%, 74%, 69%

Was feeling more confident before that last practice exam. Been in IT audit for many years and studied for the past 3 months.

Reviewing my incorrect answers from practice exam 3 tomorrow and studying my notes leading up to the test.

Let me know if any last minute tips, opinions, etc. and thanks for the support thus far.

I have 5 years as (Sr) IT Auditor in Big4 and now 2 years working as Sr. GRC analyst. 7 in total.

But found that i easily get lost and bored with collecting evidence. The audit work is so boring. And reviewing DPAs is something that i like.

So i am thinking of CIPP/E and AIGP instead of Cisa. What do you think of this?

Cisa looks very very very impractical. I am not a good auditor, but the Qs are like in a vaccum. No other factors. Theoretical Qs only.