The Complete CISA Study Plan: 3 Months to Exam Day
A detailed 12-week study plan that takes you from starting your CISA preparation through to exam day, with weekly milestones and activities.
A three-month study plan is the sweet spot for most working professionals preparing for the CISA exam. It provides enough time to cover all five domains thoroughly without stretching so long that early material fades from memory. Here is a week-by-week plan designed for candidates studying 10 to 15 hours per week.
Weeks 1 Through 4: Foundation Building
The first month focuses on learning the material domain by domain, starting with Domain 1 to establish the auditor's perspective that runs through the entire exam.
Week-by-Week Breakdown
- Week 1: Domain 1, Information Systems Auditing Process. Read the review manual chapters, take notes, and complete topic quizzes. Focus on audit standards, risk-based audit planning, and evidence collection.
- Week 2: Domain 2, Governance and Management of IT. Cover IT governance frameworks, strategic alignment, resource management, and performance measurement.
- Week 3: Domain 3, Information Systems Acquisition, Development, and Implementation. Study the SDLC, project management, change management, and system testing.
- Week 4: Domain 4, Information Systems Operations and Business Resilience. Review IT operations, service management, BCP/DRP, and database management.
Weeks 5 Through 8: Deep Dive and Practice
The second month shifts to deeper study, with emphasis on Domain 5 (the heaviest domain) and increasing use of practice questions.
Activities for This Phase
- Week 5: Domain 5, Protection of Information Assets (Part 1). Cover access controls, network security, encryption, and physical security.
- Week 6: Domain 5, Protection of Information Assets (Part 2). Study incident response, forensics, vulnerability management, and privacy.
- Week 7: Take domain-level practice tests for Domains 1 through 3. Review all incorrect answers thoroughly. Revisit weak topics.
- Week 8: Take domain-level practice tests for Domains 4 and 5. Review all incorrect answers. Update your study notes and flashcards.
Weeks 9 Through 12: Integration and Exam Readiness
The final month focuses on full-length practice exams, comprehensive review, and building exam-day confidence.
Final Phase Activities
- Week 9: Take your first full-length practice exam (150 questions, 4-hour time limit). Spend 2 to 3 hours reviewing every question, especially those you were unsure about.
- Week 10: Targeted review of weak areas identified in the practice exam. Focus on understanding concepts you consistently miss.
- Week 11: Take a second full-length practice exam. Compare results with the first to measure improvement. Address any remaining weak areas.
- Week 12: Light review only. Review flashcards and key concepts. Take a third practice exam early in the week if desired. Rest the day before the exam.
Daily Habits Throughout the Plan
- Review 10 to 15 flashcards each morning (even on rest days)
- Answer 5 to 10 practice questions daily to maintain test-taking skills
- Spend 5 minutes at the end of each study session summarizing what you learned
- Keep a running list of topics that confuse you, and schedule time to address them
This plan is a framework that you should adjust based on your progress and personal schedule. If a domain takes longer than one week to cover, extend your timeline rather than rushing through the material. Quality of understanding matters more than keeping to a rigid schedule.