Information Systems Auditor - Exams in 2026

2026 Information Systems Auditor

Information Security Auditor is a globally acknowledged certification, which builds upon the previous experience of IS professionals, to produce valuable employees who possess exceptional knowledge of Information Systems Auditing, Control, and Security.

EXAM SYLLABUS

The Process of Auditing Information Systems

In this section, I’m going to help you understand all that is in Domain 1. The first domain covers how IT auditors provide services in accordance with IT audit standards, in order to assist the organization in protecting and controlling information systems. This section talks about the audit charter and what it contains, and steps for audit planning.

Governance and Management of IT

In this section, I’m going to tell you all about Domain 2. The second domain covers how IT auditors provide assurance that necessary organizational structure and processes are in place. It also contains sections from the Business Continuity section that used to be in the old Domain 6 before they got rid of it.

IS Acquisition, Development, and Implementation

The third domain covers how IT auditors provide assurance that the practices for the acquisition, development, testing, and implementation of IS meet the organization’s strategies and objectives. There are going to be a lot of topics surrounding project management and business management/realization in this section.

IS Operations, Maintenance, and Support

What is Domain 4 all about? Well, you need to provide assurance that the processes for information systems operations, maintenance, and support meet the organization’s strategies and objectives. There are sections on disaster recovery and it’s important to know what to do in the event of data loss, what is acceptable data loss, and how to manage these issues, among other things.'

Protection of Information Assets

In this section, I’m going to tell you more about the last and 5th domain. The last domain covers how IT auditors provide assurance that the organization’s security policies, standards, procedures, and controls ensure the confidentiality, integrity, and availability of information assets. This is a very important Domain in the syllabus.

Key Takeaways

• The exam consists of 150 multiple-choice questions.

• Duration is 4 hours (240 minutes)

• The exam covers five distinct job practice domains.

• Raw scores are converted to a scaled score between 200-800.

• Thorough understanding of each domain's content is crucial for success.