r/isaca

I have been practicing for CISA for the past 5 months on and off and seriously for the past 1month.

I have practiced more than 3500 questions.

With QAE I am averaging around 65% to 70% and planning to grind in the last one week before the exam.

I write down my wrong questions along with the right answer, reason for the answer and the wrong and why I chose it and why it is not right and this is more than 100 pages of written mistakes journal.
Since it contains the right and wrong I am studying with this only and referring to CRM and internet for few concepts which I fail to understand.

For this last one week, I am planning to stick with the same plan and additionally to watch Peter Zerger youtube course.

Please let me know if this is enough for the last week, if not, please let me know what else can I do to improve my chances of passing, as this is very important for me as I am jobless for more than a year.

Thanks in advance

#cisa #isaca

Any last day tips and tricks ? What all should I carry to exam center ? Does anyone really feel confident a day before exam and while writing the exam ?

I've seen ISACA is doing a 50% discount for members on their exam materials for their AI certs (shame not exam vouchers too...) and wondered if I should bite the bullet on one of these.

I already have CISM and CRISC with ISACA, plus some ISC2 certs as well, so is this really worth it though?

I am sceptical as to whether these AI certs will ever achieve 'brand recognition' like some of the more established quals...

Seeking opinions on:

1. Is taking one of these certs worth the ticket price?
2. If yes, which one out of AAISM or AAIR will provide more utility?

Thanks!

ETA - I know a lot of people say "Well, if work is paying do whatever". I would *try* and get my employer to fund, but our approvals process is slow, so to catch the discount window, I'd probably have to fund myself initially.

Not sure what my score is yet but I will say this. Along with my experience (GRC, IT audit, TPRM) plus my two previous certs (sec+ and CISA) this one only took about 3 weeks of solid study. I only really used the QAE but I would suggest professor messer security plus study and the CISA get certified get ahead book (both helped with my sec+ and cisa) and those cover two domains in the crisc. The other stuff really just came from work experience.

My exam is in just 15 days and I’m looking for honest last-minute advice.

Resources:
• Official ISACA QAE database
• Hemang Doshi videos & MCQ

Questions for you:

1. Is QAE + Doshi enough at this stage, or do I need anything else urgently?
2. What target QAE score should I aim for?
3. Best use of the remaining time? (Especially last 3–4 days)
4. Common pitfalls or must-know areas?
5. Any exam-day tips?
   Thank you so much — any input from recent passers would mean a lot!

Hi! Already have CRISC last year and also passed CISM last week. Just wondering for those who have more than one ISACA certs, how do you deal with the CPE credits that needs to be maintained every year? I’ve only registered to online trainings and quizzers (which are both free). But my problem is, are there any more ways to earn the credits at a minimal cost. Cause I have plans to take CISA this year as well and CISSP next year 😬. Thank you!

I am honestly really undecided on this questions right now. I am trying to decide if I want to take the AAIR or the CRISC exam next? I am really up in the air about it because I already have the AAISM and the CISM certifications but I want one that revolves around Risk as well since I am already working in that field as well.

I have looked at some of the CRISC exam questions that are already out there and I am scoring around a 80% on them right now without any studying. So I know if I study it I can pass it in a relatively short amount of time. While the AAIR is a relatively new exam I feel that I would do well in that as well.

So I am honestly kind of stuck right now and am looking for some help to decide

Finally ready to post my journey.

Started in January 2026.

CISA earned on 23 January 2026

CRISC earned on 10 April 2026

CISM earned on 8 May 2026

Never say you can't and always be ready to learn and grow. I have over 20 years in Cybersecurity and over 15 years in GRC. Still growing and learning every day

I have given my cisa exam yesterday but unfortunately couldn't clear. Just wanted to know can I book my exam now as slots are very less for my centre or I can do that after 30 days only?

Just got my result, hope y'all pass!

First time taking the beta exam with ISACA, and don't quite understand how they released the beta exam result so late but finally it came in.

Background: 12 years IT at the same company. Started sysadmin, gradually took on security work. Current responsibilities include patch management across a large Windows/VMware environment, vulnerability remediation, SFTP security administration for external partners, and administering a regulated data processing enclave with access controls in an HSM environment. I gather technical evidence for ISO 27001, PCI-DSS, and GSMA SAS audits but don't own any of those programs.

Just passed CySA+ this week. Also hold ISC2 CC and some Cisco networking certs. No degree. US citizen.

Target: ISSO, Information Assurance Analyst, GRC Analyst, or Cybersecurity Compliance roles. I want work I actually enjoy that pays well. I like the controls and compliance side more than SOC work or firewall engineering. Long term goal is CISA late 2026, eventually independent consulting.

Honest gaps: Never driven an ATO. Never written an SSP or FIPS 199. RMF knowledge is conceptual not hands-on. Audit exposure is evidence gathering not program ownership.

Questions:

• Does this path make sense or am I missing something obvious?
• Is a technical infrastructure background actually a differentiator for GRC/compliance roles or does everyone have it?
• Anything I should prioritize in the next 6 months that I'm not thinking of?

Appreciate straight answers.

I'm exploring some tech and cyber communities in Hyderabad and came across ISACA. Do you think it is worth becoming a member of this community?