Domain Guides

Every CISA and CISM domain explained: weight, official subtopics, what the exam rewards, common traps and how to study it.

• CISA Domain 1 · Information System Auditing Process — CISA — 18%
• CISA Domain 2 · Governance and Management of IT — CISA — 18%
• CISA Domain 3 · Information Systems Acquisition, Development and Implementation — CISA — 12%
• CISA Domain 4 · Information Systems Operations and Business Resilience — CISA — 26%
• CISA Domain 5 · Protection of Information Assets — CISA — 26%
• CISM Domain 1 · Information Security Governance — CISM — 17% (18% from 3 Nov 2026)
• CISM Domain 2 · Information Security Risk Management — CISM — 20%
• CISM Domain 3 · Information Security Program — CISM — 33%
• CISM Domain 4 · Incident Management — CISM — 30% (29% from 3 Nov 2026)