IS Auditing Process: Exam Day Guide
Time Management for Domain 1 Questions
Domain 1 accounts for roughly 21% of the CISA exam, which translates to about 31 questions out of 150. Plan to spend no more than 1.5 minutes per question in this domain. If a question involves a lengthy audit scenario, read the final sentence first to understand what is actually being asked before reading the full stem. Flag any question that takes longer than two minutes and return to it after completing the rest of the exam.
Approaching Audit Scenario Questions
Scenario questions in this domain typically describe an audit engagement and ask you to identify the most appropriate next step, finding, or recommendation. Always determine where you are in the audit lifecycle (planning, fieldwork, reporting, follow-up) before selecting an answer. ISACA expects you to follow a structured, risk-based approach; answers that skip phases or jump to conclusions are almost always incorrect. Pay close attention to whether the question asks what the auditor "should do first" versus what the auditor "should recommend."
Key Patterns to Recognize
Questions about audit evidence will test your understanding of reliability hierarchies: evidence obtained directly by the auditor is more reliable than evidence provided by the auditee. Look for patterns involving independence, objectivity, and professional skepticism, as these are foundational to the IS audit process. When a question mentions "risk-based audit planning," the correct answer will almost always prioritize areas of highest risk rather than areas of highest dollar value or management preference.
Common Trap Answers
A frequent trap is selecting an answer that describes a valid audit activity but one that occurs at the wrong stage of the engagement. For example, issuing a final report before management has had the opportunity to respond is procedurally incorrect. Another common trap involves choosing "notify management immediately" when the situation calls for gathering additional evidence first. Watch for answers that confuse the auditor role with the management role; auditors recommend, they do not implement controls.
What ISACA Expects as the Best Answer
ISACA consistently favors answers that align with ISACA IS Audit and Assurance Standards and Guidelines. The "best" answer is the one that demonstrates a systematic, documented, risk-based approach to auditing. When two answers seem correct, choose the one that provides the most comprehensive coverage of risks while maintaining auditor independence. ISACA values professional judgment supported by evidence over rigid adherence to checklists.
Evidence Collection and Data Analytics
Expect questions that test whether you understand the difference between compliance testing and substantive testing. Compliance tests verify that controls are operating as designed, while substantive tests verify the accuracy of data or transactions. Data analytics questions will focus on using CAATs (Computer-Assisted Audit Techniques) to identify anomalies, trends, and exceptions in large data sets. Remember that continuous auditing and continuous monitoring serve different purposes; continuous auditing is an audit function, while continuous monitoring is a management function.
Reporting and Quality Assurance
Audit reporting questions will test your knowledge of what belongs in the audit report and the proper sequence of communication. Draft findings should always be discussed with management before the final report is issued. Quality assurance questions focus on both internal reviews (self-assessments) and external reviews, which ISACA recommends at least every five years. The audit charter, which defines the authority and responsibility of the IS audit function, is a critical concept that appears frequently.
Practical Exam Day Logistics
Arrive at the testing center at least 30 minutes before your scheduled appointment to allow time for check-in and identity verification. Bring two forms of identification, with at least one being a government-issued photo ID. You will not be allowed to bring personal items into the testing room; lockers are typically provided. Take advantage of the optional 15-minute break to reset your focus, and remember that the clock does not stop during breaks.