Certified Information Systems Auditor credential artwork

Certified Information Systems Auditor (CISA) Courses

Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.

A good CISA course teaches the five domains in ISACA's terms and builds the judgment to choose the best answer in audit scenarios. We compared the main options on coverage of the August 2024 outline, depth, practice questions and price.

Most people should start with Hemang Doshi's Udemy course, which follows the five domains in about 23 hours. Choose ISACA's online review course when an employer pays, the Review Manual as the official reference and Packt's guide if the manual feels too dry.

CourseBest forFormatPrice
CISA Online Review CourseEmployer-funded studyInteractive$895
CISA Review Manual, 28th editionOfficial referenceBook$139
Masterclass - CISA ExamVideo courseVideo$20
CISA Certified Information Systems Auditor Study Guide, 3rd editionShorter study guideBook$40
Employer-funded study

CISA Online Review Course

ISACA's own self-paced course of about 22 hours, with more than 40 modules of video, interactive lessons and flashcards, and a 75-question practice exam. Completing it earns 26.5 CPE. It is the only course here from the exam's owner.

Great fit if you want official guided instruction

Poor fit if you are paying yourself; choose Hemang Doshi's course

Official reference

CISA Review Manual, 28th edition

ISACA's official reference for the five domains, with self-assessment questions and explanations in each chapter. It teaches by reference rather than lectures, so you read it and look up concepts as you practise.

Great fit if you want the complete reference to look up concepts as you practice

Poor fit if you want an easy first read; choose Doshi's course or Packt's guide

Video course

Masterclass - CISA Exam

About 23 hours across 243 lectures that follow the five domains, with short practice-question sets after each topic. Hemang Doshi updated it for the current outline. Udemy's 30-day refund applies.

Great fit if you want a video course that teaches the domains before you start question practice

Poor fit if you want ISACA's official course; choose the ISACA review course

Shorter study guide

CISA Certified Information Systems Auditor Study Guide, 3rd edition

Hemang Doshi's 356-page study guide, aligned with the 2024 Review Manual and much shorter than ISACA's own text. It comes with 1,000+ online practice questions and flashcards.

Great fit if you find the official manual too dry

Poor fit if you want video lessons or ISACA's own wording; choose Doshi's course or the Review Manual

How to choose a CISA course

  • Match the August 2024 outline. ISACA's course and manual, Doshi's course and Packt's guide all cover the current CISA outline. Skip older editions of the manual.
  • Pick one main source. Use one course or one book for the five domains, then spend the rest of your time on practice questions. Extra courses add hours without much new content.
  • Choose guided or self-led. ISACA's course gives about 22 hours of structured modules and a 75-question practice exam. The Review Manual is a reference you read and look things up in.
  • Practise in ISACA's wording. CISA questions ask for the best answer in a scenario. A course alone is not enough; add a question bank that explains every option.

Recommended CISA course combinations

  • Lowest cost: Packt's study guide ($40) with its 1,000+ practice questions, then Doshi's Practice Tests to prepare for CISA Exam ($20).
  • Most people: Hemang Doshi's course with ISACA's Questions, Answers & Explanations Database ($399) for ISACA's own wording.
  • Employer pays: ISACA's online review course ($895) with the Questions, Answers & Explanations Database ($399).
  • Already audit IT systems: The Review Manual ($139) and the Questions, Answers & Explanations Database, skipping a video course.

Compare all CISA practice tests →

CISA course FAQ

What is the best CISA course?

For most people, Hemang Doshi's Udemy course plus a question bank. ISACA's own review course is the official option when an employer pays.

Do I need ISACA's course to pass CISA?

No. ISACA's course is one option. Doshi's course, the Review Manual or Packt's guide cover the same five domains.

How long does a CISA course take?

ISACA's course is about 22 hours and Doshi's is about 23 hours. Plan for about 120 hours of preparation in total, between 90 and 150.

Which CISA outline do the courses cover?

All four options here cover the August 2024 outline that the current exam uses.