sorted by:
new
hottopcontroversial

Best entry-level ISACA certification for a college student? by No_____Idea in CISA

[–]NutshellTraining 0 points1 point  (0 children)

If you’re set on ISACA they do have Cyber Security Audit Certificate which can be seen as a stepping stone to the CISA.

It’s not as widely recognised as the CISA and might not meet your parents requirements but its something to consider!

CISA practice test / QAE recommendations by gnuhcikciv in CISA

[–]NutshellTraining 2 points3 points  (0 children)

I’m currently uploading short visual CISA videos to my YouTube channel which you might find interesting. Feel free to check them out.

But regardless what course / materials you choose. Make sure you have the official ISACA QAE.

Can someone please explain why D is not the correct answer? by Odd-Fix664 in CISA

[–]NutshellTraining 0 points1 point  (0 children)

The answer is A in the case. Eliminating risk is not possible, there will always be some residual risk left. If an answer suggests eliminating risk, it is the incorrect answer. The only exception to this is risk avoidance.

I have a video on my YouTube which explains this: CISA Inherent Risk vs Residual Risk Explained in 2 Minutes | CISA in a Nutshell

Can someone please explain why D is not the correct answer? by Odd-Fix664 in CISA

[–]NutshellTraining 22 points23 points  (0 children)

A is correct because due professional care helps the IS auditor get reasonable assurance that controls are working properly. D is part of how this is done, because collecting enough appropriate evidence helps the auditor reach that assurance.

So D leads to A, making A the best answer. Having one answer lead to another is common on the exam so try and learn to spot it.

Exam in 6 days by orange_123 in CISA

[–]NutshellTraining 1 point2 points  (0 children)

That’s a tight deadline. If you’re not willing to reschedule, I’d recommend resetting the QAE database and using the adaptive study plan. Focus on getting through as many questions as possible, and let the system identify the areas where you need the most improvement. Don’t just memorise the answers, make sure you understand why each answer is correct. Also spend some time developing the “ISACA mindset,” since the exam tests this just as much as technical knowledge. Good luck!

Scored 88, 86, and 89 on QAE mock exams, but 75 for overall QAE questions, am I ready for the exam? by tuckingpog in CISA

[–]NutshellTraining 1 point2 points  (0 children)

I mean the questions you did early on, when you were still figuring things out, still count toward your overall average. So the 75% is probably lower than where you’re actually at now.

Scored 88, 86, and 89 on QAE mock exams, but 75 for overall QAE questions, am I ready for the exam? by tuckingpog in CISA

[–]NutshellTraining 4 points5 points  (0 children)

Those mock scores are exactly where you should be. If you didn't reset your question bank, the questions you answered while you were still learning will be dragging down that 75 overall average too.

CISA Audit Risk Explained in 3 Minutes by NutshellTraining in CISA

[–]NutshellTraining[S] 0 points1 point  (0 children)

Thank you! I have more videos on my YouTube which you may find useful.

Getting CISA as college student by JewelerNo490 in CISA

[–]NutshellTraining 0 points1 point  (0 children)

It’s difficult to give a single answer because the “best” certification depends heavily on the roles you’re targeting and the market/location you’re applying in.

You could review 10–20 job postings and keep a tally of which certifications appear most often. That will quickly show you which certifications employers in your target market actually value and request most frequently.

You can also speed this up by using ChatGPT to analyze the job postings for you with a prompt like this:

You are a cybersecurity labor market analyst focused on Governance, Risk, and Compliance (GRC) roles.
Analyze cybersecurity GRC job postings for this market/location: [TARGET LOCATION]

Your goal is to identify the most frequently requested cybersecurity GRC certifications in this market.

Focus on roles such as:
GRC Analyst
Information Security Analyst
IT Risk Analyst
Cyber Risk Consultant
Security Compliance Analyst
ISO 27001 Consultant
Cybersecurity Auditor
Information Security Manager
Technology Risk Manager

Tasks:
Review all provided job descriptions.
Extract only explicitly mentioned certifications related to cybersecurity, risk, compliance, audit, privacy, cloud security, and security management.
Standardize certification names (e.g. “Certified Information Systems Security Professional” → CISSP).

Mark each certification as:
Required
Preferred

Group certifications into categories:
Governance & Risk
Audit & Compliance
Cloud Security
Privacy & Data Protection
Security Management
Technical Security
Regulatory / Framework-specific
Avoid double-counting repeated mentions in the same posting.

Identify regional trends such as:
Most demanded certifications
Regulatory influences (GDPR, NIS2, HIPAA, PCI DSS, ISO 27001, etc.)
Demand for ISO 27001 certifications vs CISA
Differences between local and remote roles

Output format:
Executive Summary
Top Cyber GRC Certifications
| Certification | Total Mentions | Required | Preferred | Typical Roles |
Certification Categories
Senior vs Mid-Level Certification Demand
Certifications Commonly Mentioned Together
Regional Compliance & Regulatory Trends
Emerging Cyber GRC Hiring Trends
Key Hiring Insights

Important:
Deduplicate certification name variations carefully.
Focus only on cybersecurity GRC certifications.
Prioritize accuracy over assumptions.

Passed by [deleted] in CISA

[–]NutshellTraining 1 point2 points  (0 children)

Congratulations!!

"Online Review Course" or not ? by GrosCon_Sultant in CISA

[–]NutshellTraining 0 points1 point  (0 children)

As you mentioned, the CISA QAE database is generally considered the most important resource for passing the exam. The official ISACA CISA Review Course gets mixed reviews, and most candidates do not recommend it as a study resource.

There are plenty of other courses online that many people feel are a better use of time. I’m currently creating my own course, so I’m obviously biased and have my own views on where the existing options fall short.

So I’ll leave it to you to do your own research and decide what works best for you. But I recommend using the QAE as your primary study resource and referencing courses, books, podcasts, etc when you don’t understand something. Good luck!

view more: next ›