CISA Domain 1 · Information System Auditing Process

Exam

CISA

Exam weight

18%

What it covers

Planning risk-based audits, the types of controls, testing and sampling, evidence collection, data analytics, reporting and the quality of the audit function itself.

What the exam rewards

Risk-based planning over calendar-based coverage
Independence and professional standards (ITAF)
Reliable, sufficient evidence
Reporting and real follow-up

Common traps

Picking an option where the auditor fixes the issue
Accepting management statements as evidence
Confusing the audit charter with the engagement letter

Official subtopics

Planning

IS Audit Standards, Guidelines, and Codes of Ethics
Types of Audits, Assessments, and Reviews
Risk-Based Audit Planning
Types of Controls and Considerations

Execution

Audit Project Management
Audit Testing and Sampling Methodology
Audit Evidence Collection Techniques
Audit Data Analytics
Reporting and Communication Techniques
Quality Assurance and Improvement of Audit Process

How to study it

Learn the audit risk model and the sampling types cold, then practice evidence-reliability questions until the ranking is instinctive.