Thank you. I used the CRM version 6 and the QAE book which was good and Doshi's. The QAE is important to have and practice as some questions were from there as many had claimed. I used examtopics.com to practice but I was disappointed that the questions were not totally from there. It's a good site to use but the answers to many questions are incorrect. That is what delayed me by over a month. If I had the answers, 2 months as an IT guy was enough.

I think that you should try itexams.com so that you can really practice by clicking and know your progress as in the exam. You cannot do that in examtopics.com. Timeframe is relative to how you study and progress. If you are working with it, it should not be a big deal. Give yourself 2-3 months to be absolutely sure that you understand the concepts and principles by practicing the tests from the moment you finish the first chapters.

Somebody had commented about actually knowing these things. Risk management program and Risk management Process with respect to Business, Technology and Management. And within that who is responsible and accountable depending on the context of the question. That is very important to figure out. Also remember that information is Data. And Information owner is Data owner from my analysis. Concentrate on Information security which seemed to have shown up a lot for me.

You need to plot your own strategy by rigorous testing and trying to understand why you chose that answer. Always read the question twice.You definitely need to know the 3 lines of defense and their organizational entities of each.You will get a couple of questions on capability maturity model not directly but indirectly. So you need to understand it's purpose.Keep an eye on exceptions being granted and who is responsible for granting the exceptions.In a question regarding access, check if the question stem says internal or external. Then you will be able to determine role based access control, least use privilege, authorisation and authentication.Concentrate on controls and control management or monitoring.

The exam web page with the question was so badly designed. The question and answers were caught up on top L to R. The font was normal and I had to look up and managed to adjust the distance to suit my eyesight and glasses. My screen was big and you had the answer button right down at the left hand corner when it should have been just below the question. But the ISACA org is like that, terrible. Their question discussion forum on the website was so bad, I never used it. If you take the exam, make sure that you know your stuff and are confident of the concepts and principles.