r/isaca

Please share if anyone have AAIA review manual and q&a pdfs. Thank you

I am thrilled to share that I have officially passed my CISA exam!

I initially planned to take this exam last year, but life got a bit hectic, and I had to postpone. This past Wednesday, I decided to take a pretest and scored a 69%. After reviewing the questions I got wrong, I felt more prepared and confident, so I scheduled my exam for Sunday.

I used the CISA Official Guide and QAE to study for this. The exam was really straightforward.

I'm trying to understand the practical difference between passing an ISACA exam and obtaining the certification.

Does ISACA not issue a pass result unless you're certified? Do recruiters and hiring managers value an exam pass on its own, or does it only become meaningful once you're certified? At the end of the day, certifications alone don't matter much if someone doesn't have the skills to perform the role. If a candidate has passed the exam without formal 'certificate', how is that generally viewed during the recruitment process or once they're on the job?

My assumption is that the real value lies in the knowledge and skills gained while preparing for the exam, with the certification serving as formal validation of that achievement. I'd be interested to hear how recruiters, hiring managers, and those who've been through the process see it. I'm not interested to review the benefits of accessing additional material, professional networking, attending events etc. as most of us don't value them without the real experience to perform the role.

I'm generally curious about the distinction, not trying to challenge the value of 'certification'. I may be missing something, and I'm happy to be corrected.

Hi,

I'm new to ISACA. I recently received a 50% off ISACA membership offer via email and purchased the membership at the discounted price. My membership is valid until 31-Dec-26.

I understand that once I register for the CRISC exam, I have 6 months to schedule and take it.

My question is: If I register for the CRISC exam on 31-Dec-26 (the last day of my membership) using the member discount, can I schedule the exam anytime up to 30-June-27?

Also, would I need to renew my ISACA membership after 31-Dec-26 to remain eligible to take the exam, even though I registered and received the member discount while my membership was still active?

Has anyone been in a similar situation or knows how ISACA handles this?

Thanks in advance!

Passed CISM and CISA a while back and am now prepping for AAISM with a target of end of July. Domains 1 and 2 are solid on the QAE, but Domain 3 is a wall. Couldn't answer a single question on it. The Cyvitrix course on Udemy isn't cutting it for me.

I have the QAE. I have the ISACA Review Manual. Udemy isn't working. Looking for something that bridges the technical AI concepts with the security controls framing that the exam actually tests.

Anyone who's passed recently, especially if you came from a GRC background rather than a technical/ML background, I'd love to know how you approached this domain. What clicked for you?

Timeline: exam end of July. Happy

Hi everyone,

I’m CISA certified and trying to figure out my next move. I currently work in IT audit, split between 2 years of external statutory IT audit and 2 years of internal tech heavy IT audit.

I want to take something that is actually doable and fun. I’m heavily considering CRISC or CISM.

Also, a couple of dilemmas:

1. I’m holding off on the AAIA (Advanced in AI Audit) for now because it’s pretty new and I see mixed reviews online.

2. I’m incredibly nervous about the CIA (Certified Internal Auditor). I’m a core tech guy at heart, and I’m terrified I’ll fail the non-tech, accounting-heavy audit stuff. Plus, the exam costs are way too high to just "wing it." If I fail, I’ll be devastated lol.

Given a pure tech/IT audit background, is the CIA even worth the stress right now? Or should I just stick to the CRISC/CISM track?

Would love some thoughts, advice, or motivation!

just got a new job as a tech risk and controls assurance analyst but idk what the future trajectory of this role is. i kind of am losing hope because my goal is to have a 6 figure salary within 5 years but idk what i can even do with this role to achieve that. i have cisa too. help

I have all ISACA stuff CISA, CISM, CRISC and PMP and I'm jobless. My last experience was an technical lead.

Would my profile would be attractive for recruiters and would i find a job ?

I have access to the 12th edition of QAE which is based on CISA's old manual. Is it ok if i practice on it just to understand ISACA's mindset while combining it with latest CRM.

Kindly advice.