Study Guide
ISACA CISA Study Guide
Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.
ISACA · Free, ad-free audio course
A structured, audio-first learning route for ISACA CISA, designed for focused review and practical understanding.
Companion Books
The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.
Study Guide
Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.
Flashcards Book
Use the flashcards book for active recall, terminology checks, rapid review, and repeated practice across the course objectives.
Complete Lesson Directory
Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.
105 lessons available
Getting Started
Listen to Welcome to the CISA Certification in the ISACA CISA audio course.
Getting Started
Listen to Understanding ISACA and Key Resources in the ISACA CISA audio course.
Getting Started
Listen to Proven Strategies for Passing the CISA Exam in the ISACA CISA audio course.
Getting Started
Listen to Critical Exam Tips, Test-taking Strategies, and Common Pitfalls in the ISACA CISA audio course.
Getting Started
Listen to Final Review – Summary of Key Concepts Across All Domains in the ISACA CISA audio course.
Getting Started
Listen to Exam-Day Preparation – What to Expect and How to Prepare Mentally in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Overview of Domain 1 – Information Systems Auditing Process in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to IS Audit Standards, Guidelines, and Codes of Ethics in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Types of Audits, Assessments, and Reviews in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Fundamentals of Risk-Based Audit Planning in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Advanced Risk Assessment Methods and Practical Examples in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Types of Controls and Audit Considerations in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Audit Project Management in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Audit Testing and Sampling Methodology in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Audit Evidence Collection Techniques in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Introduction to Audit Data Analytics Tools and Techniques in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Practical Applications and Case Studies of Audit Data Analytics in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Audit Reporting and Communication Techniques in the ISACA CISA audio course.
Domain 1 · Information Systems Auditing Process
Listen to Quality Assurance and Improvement of Audit Processes in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to Overview of Domain 2 – Governance of IT in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to Overview of Domain 2 – Management of IT in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to Laws, Regulations, and Industry Standards in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to Organizational Structure, IT Governance, and IT Strategy in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to IT Policies, Standards, Procedures, and Practices in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to Enterprise Architecture and Considerations in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to ERM Frameworks and Principles in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to ERM Implementation and Evaluation Examples in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to Privacy Program and Principles in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to Data Governance Program Fundamentals in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to Practical Data Classification Techniques and Compliance in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to IT Resource Management in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to IT Vendor Management in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to IT Performance Monitoring and Reporting in the ISACA CISA audio course.
Domain 2 · Governance and Management of IT
Listen to Quality Assurance and Quality Management of IT in the ISACA CISA audio course.
Domain 3 · Information Systems Acquisition, Development and Implementation
Listen to Overview of Domain 3 – Information Systems Acquisition, Development & Implementation in the ISACA CISA audio course.
Domain 3 · Information Systems Acquisition, Development and Implementation
Listen to Project Governance and Management in the ISACA CISA audio course.
Domain 3 · Information Systems Acquisition, Development and Implementation
Listen to Business Case and Feasibility Analysis in the ISACA CISA audio course.
Domain 3 · Information Systems Acquisition, Development and Implementation
Listen to Waterfall and Traditional SDLC in the ISACA CISA audio course.
Domain 3 · Information Systems Acquisition, Development and Implementation
Listen to Agile, DevOps, and Modern SDLC Approaches in the ISACA CISA audio course.
Domain 3 · Information Systems Acquisition, Development and Implementation
Listen to Control Identification and Design in the ISACA CISA audio course.
Domain 3 · Information Systems Acquisition, Development and Implementation
Listen to System Readiness and Implementation Testing in the ISACA CISA audio course.
Domain 3 · Information Systems Acquisition, Development and Implementation
Listen to Implementation Configuration and Release Management in the ISACA CISA audio course.
Domain 3 · Information Systems Acquisition, Development and Implementation
Listen to System Migration, Infrastructure Deployment, and Data Conversion in the ISACA CISA audio course.
Domain 3 · Information Systems Acquisition, Development and Implementation
Listen to Post-Implementation Review in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Overview of Domain 4 – Information Systems Operations & Business Resilience in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to IT Components in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to IT Asset Management in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Job Scheduling and Production Process Automation in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to System Interfaces in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Shadow IT and End-User Computing in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Systems Availability and Capacity Management in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Incident Management Best Practices in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Problem Management and Root Cause Analysis in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Change Management Processes in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Configuration and Patch Management Processes in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Operational Log Management in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to IT Service Level Management in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Database Management Practices in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Overview of Business Resilience in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Conducting a Business Impact Analysis (BIA) in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to System and Operational Resilience in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Data Backup, Storage, and Restoration Practices in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Developing and Maintaining a Business Continuity Plan in the ISACA CISA audio course.
Domain 4 · Information Systems Operations and Business Resilience
Listen to Disaster Recovery Planning Fundamentals in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Overview of Domain 5 – Protection of Information Assets in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Information Asset Security Frameworks, Standards, and Guidelines in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Physical and Environmental Controls in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Identity and Access Management (IAM) in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Network and Endpoint Security in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Data Loss Prevention in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Data Encryption Methods and Controls in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Public Key Infrastructure (PKI) in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Cloud and Virtualized Environments in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Mobile, Wireless, and IoT Device Security in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Security Awareness Training and Programs in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Information System Attack Methods and Techniques in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Security Testing Tools and Techniques in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Security Monitoring Tools and Techniques in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Security Incident Response Management in the ISACA CISA audio course.
Domain 5 · Protection of Information Assets
Listen to Evidence Collection and Digital Forensics in the ISACA CISA audio course.
Applied Audit Practice
Listen to Planning Effective Information Systems Audits in the ISACA CISA audio course.
Applied Audit Practice
Listen to Conducting Audits According to IS Audit Standards in the ISACA CISA audio course.
Applied Audit Practice
Listen to Applying Project Management in IS Audits in the ISACA CISA audio course.
Applied Audit Practice
Listen to Communicating Audit Results and Recommendations in the ISACA CISA audio course.
Applied Audit Practice
Listen to Conducting Post-Audit Follow-Up in the ISACA CISA audio course.
Applied Audit Practice
Listen to Utilizing Data Analytics in Auditing in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating Automation and Decision-Making Systems in the ISACA CISA audio course.
Applied Audit Practice
Listen to Quality Assurance and Improvement of Audit Processes in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating IT Strategy Alignment in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating IT Governance Effectiveness in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating IT Resource and Project Management Alignment in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating Ownership of IT Risks, Controls, and Standards in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating IT Key Performance and Risk Indicators in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating IT Vendor Selection and Contract Management in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating Supply Chain Risk and Integrity Issues in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating End-User Support Processes in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating Enterprise Architecture Alignment in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating IT Operations and Maintenance Practices in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating Data Governance Program in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating Privacy and Data Classification Programs in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating Policies Related to IT Asset Lifecycle Management in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating Shadow IT Risks and Controls in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating Threat and Vulnerability Management in the ISACA CISA audio course.
Applied Audit Practice
Listen to Providing Guidance on Information Systems Quality Improvement in the ISACA CISA audio course.
Applied Audit Practice
Listen to Evaluating Risks of Emerging Technologies and Practices in the ISACA CISA audio course.
Try another term or clear one of the filters.
A Practical Study Routine
Use the free audio course during a commute, walk, workout, or focused study session.
Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.
Use the flashcards book to practice active recall and quickly revisit weak areas.
Related Magazine Features
Related Cyber Wiki
AI audit analytics applies reproducible queries, statistics, visualizations, and anomaly detection to evaluate populations and focus testing without replacing professional judgment.
AI assuranceAI audit evidence integrity is the ability to show that logs, model artifacts, data extracts, test results, approvals, and screenshots are authentic, complete, attributable, and unchanged.
AI assuranceAI audit finding follow-up verifies that corrective actions address the root cause, operate as intended, and reduce the stated risk before a finding is closed.
AI auditAI audit hallucination controls prevent unsupported generated statements from being treated as evidence, criteria, citations, calculations, or conclusions.
AI assuranceAI audit scope defines the systems, life-cycle stages, data, decisions, vendors, locations, and stakeholders included in an engagement, while audit criteria define the requirements used to judge them.
AI assuranceAI control design effectiveness asks whether a control, as documented and configured, is capable of preventing, detecting, or correcting the risk it was selected to address.