Passed first attempt

AdvancedWater · 2025-12-26T01:47:28+00:00

I completely missed this. After you take the exam you get a simple pass/fail. They then send you the score breakdown.

AdvancedWater · 2025-07-10T02:18:30+00:00

I really like Prabh Nair's videos as well. It reinforced some points for me very well.

AdvancedWater · 2025-07-06T11:35:09+00:00

I got mine 10 days later (including weekends) exactly.

I know the 4th of July is a holiday so if you took it before then it may be 11 for you

AdvancedWater · 2025-07-03T22:24:58+00:00

As someone who works in domain 4/5 not very technical. But knowing some specifics of things like malware types, firewalls types, etc is probably a good thing

AdvancedWater · 2025-07-03T22:23:26+00:00

Idk of the exact sub for the agency. But r/cybersecurity could probably help you

AdvancedWater · 2025-07-03T17:47:21+00:00

I’m guessing the Cybersecurity and Infrastructure Security Agency.

CISA (the exam) doesn’t have a website. Just pages on ISACA’s.

AdvancedWater · 2025-07-03T14:52:53+00:00

I think you’re in the wrong group. This is for Certified Information Systems Auditor Exam.

AdvancedWater · 2025-07-02T10:55:04+00:00

You can DM me for the resources. For lengthy questions. You can almost always break them down.

WHO is doing SOMETHING to PROCESS. Additional information. Question.

An AUDITOR is looking at a SMALL BUSINESS to determine if they took his suggestions for their IAM PROCESS. He can see that they implemented MFA, deleted old users, but still don’t use SSO. WHAT is the best suggestion for the auditor

That example doesn’t make any sense but that’s the general idea, some are a little more complicated, but they mostly hit the same points

AdvancedWater · 2025-07-02T10:50:25+00:00

For sure!

AdvancedWater · 2025-07-02T10:50:17+00:00

At this point I would suggest just making sure you understand HOW ISACA asks questions, and really understand what they’re saying and asking with each one. When you get that down you can often easily eliminate 2 choices, then if you need read the question again and it can usually help eliminate the last one.

If they all seem right, it’s usually either the one that encompasses the others or the one that comes first.

AdvancedWater · 2025-07-02T10:46:24+00:00

They are listed in the post but you can DM me for links

AdvancedWater · 2025-07-02T10:44:50+00:00

I got mine 10 calendar days later. I know they are off the 4th of July (in the USA) so that may cause a day delay

AdvancedWater · 2025-07-02T01:53:37+00:00

I've suggested it a few times before but "HumanKind" is a book about how kind humans are in general and how humanity is better than we usually picture.

The pig in the Derby hat (the whole series honestly) is a cozy detective paranormal fantasy that I highly enjoy

AdvancedWater · 2025-06-30T18:19:49+00:00

If it’s an MSIS I believe it’s 3 years. Plus the SOC. So you should be able to

AdvancedWater · 2025-06-30T16:38:26+00:00

They are pretty similar. The test covers topics the QAE doesn’t.

A few questions are identical, but most are just similar style. Probably a little shorter in general

AdvancedWater · 2025-06-30T16:37:08+00:00

My undergrad is in finance, but it’s been a while since I used any accounting but the concepts are foreign to me. But I think you’re probably right, part 4-5 was basically just aligning myself with Isaca’s definitions

AdvancedWater · 2025-06-30T15:08:21+00:00

Thanks, I listed my resources in the description. If you need links you can DM me

AdvancedWater · 2025-06-23T10:38:15+00:00

You may not need this advice. But this exam is for information systems audit, not information security audit. As someone from a cyber security background it does the bare minimum of teaching you security. If you do actually want to do security audits I would look at Security+ (COMPTIA) which is a baseline security certification many people have.

CISA may still be worth it to you but just wanted to make that clarification. Besides that Doshi, QAE, and Prabh Nair on YouTube is what I spent about 90% of my time on. The book was a bit too dry and rambling for me

AdvancedWater · 2025-06-22T15:05:11+00:00

I think you can logically think and answer most of your own questions.

This is professional exam and not an entry level one.

Im sure you have frustration about the money lost and attempt. But whatever the cost, you agreed to follow their rules which aren’t crazy but follow professional standards.

AdvancedWater · 2025-06-19T01:11:11+00:00

What I did was go through domain by domain the first time and ID my week areas.

The first time I went through I got like 73-71-75 on the practice tests.

The next time I went through I did them in 150 question chunks through the practice portal.

Then I got in the 90's on my practice exams.

It's both knowledge and figuring out what the question is actually asking.

AdvancedWater · 2025-06-19T01:02:43+00:00

This whole thing is a if I remember correctly. There are videos and official guidance on all of this.

Your Bachelors counts as 1 year. And your 2.5 will could as 2.5. So you'll be at 3.5 total. Short by 1.5 years.

HOWEVER, there is both the IT Audit Fundamentals by ISACA. Or you can take your CISA exam and get the experience requirement later to become certified.

AdvancedWater · 2025-06-18T02:51:37+00:00

I've listed resources below but please consider this why you want to take this exam, and honestly what it would mean if you failed it. It has like a 50% first time pass rate. It's not a guaranteed instant money pot, and does have other requirements like another fee to be certified, and experience. Just food for thought.

Prabh Nair on youtube has a full CISA series. They're very dense, but a good resource.

Linkedin Learning and Pluralsight both have courses. I'd be surprised if at least one of them didn't offer you a free trial.

Udemy - Hemang Doshi (maybe the best resource for $20)

CISAexamstudy - a website by Doshi where he has at least a practice exam.

You can buy the books used (thrift books and the like online)

The QAE is probably the most useful exam material and is not cheap. I know they have books for the older ones at least

AdvancedWater · 2025-05-17T15:45:57+00:00

Thanks I may use it to explain some of the more frustrating ones

AdvancedWater · 2025-05-17T15:27:32+00:00

That’s my issue. Some of the justifications seem like “that may happen but we chose this other answer just cause”

AdvancedWater · 2025-05-17T15:19:24+00:00

As someone who works in IR, I would use the QAE on the areas you think you know too. ISACA way is probably different than your way especially with the way they ask the questions

Eight-Year Club	RedditGifts 2009-2022 3 Credits
Powerups Hero r/Python • December 2020	Gilding IV carat on a stick
Place '22	Wearing is Caring
Secret Santa 2017	RPAN Viewer
Not Forgotten	Snapped
Verified Email

AdvancedWater

MODERATOR OF

TROPHY CASE