CISA Exam Day: What to Expect, Start to Finish

CISA exam day runs roughly like this. You arrive or log in 30 minutes before your appointment, hand over a current government-issued photo ID that matches your ISACA account name exactly, lock away everything you brought with you, sit down to a short tutorial, then answer 150 multiple-choice questions inside a 4-hour clock. When you submit, a preliminary pass or fail status appears on screen. The official scaled score follows by email and in your ISACA account within 10 working days.

The two delivery options, a PSI test center or PSI online remote proctoring, run to the same rules. Same 4 hours, same 150 questions, same closed-book restrictions, same two 10-minute breaks. What differs is who enforces the environment. In a test center, staff do it for you. At home, you do it yourself under a webcam, and a room that fails the check is your problem and your forfeited fee. Every figure below comes from ISACA's Exam Candidate Guide, version 1.26, and ISACA's own CISA page. Give anything you plan around a final check in the current guide before your date, because these are the details ISACA revises most often.

How do you schedule the CISA exam?

Registration is continuous, so there are no exam windows to wait for. Once your registration fee is paid in full you can book an appointment as early as 48 hours later, and appointments open on a rolling 90-day horizon. If you cannot see your preferred site or date, you are probably looking further ahead than 90 days.

The constraint that catches people is the eligibility period. Registration buys you six months to sit the exam, counted from the registration date. Miss that window and both the eligibility and the fee are gone. One six-month extension is available for USD 75, and the option appears on your dashboard in a window running 30 days either side of your expiry date. If an appointment is already booked, cancel it at least 48 hours out before extending.

Given the fee is USD 575 for ISACA members and USD 760 for nonmembers, plus a USD 50 certification application processing fee later, treat the six months as a real deadline rather than a formality. We break the full cost picture down in what the CISA exam costs.

Can you reschedule or cancel a CISA appointment?

You can reschedule at any point in your eligibility period without penalty, provided you do it a minimum of 48 hours before the appointment. Inside 48 hours, the choice is take the exam or forfeit the registration fee. There is no partial refund route: ISACA states plainly that exam fees are nonrefundable and nontransferable.

Two other clauses matter. Turning up more than 15 minutes late counts as a forfeit, same as a no-show. And if you miss the appointment through genuine personal hardship, illness, a death in the immediate family, a traffic accident, you can ask to reschedule without losing the fee by contacting PSI within 72 hours with documentation. That request can be denied, in which case you register and pay again.

Test center or remote proctoring: which should you pick?

Here is our honest opinion. If a PSI test center is within a reasonable drive, take the test center.

Remote proctoring saves the travel and lets you sit in a chair you already like. The trade is that you inherit the compliance burden. Your room has to be walled and private with nobody else entering for four hours. Your desk has to be clear. You have to install PSI's secure browser, exactly the software a corporate laptop build tends to block, which is why ISACA recommends a personal machine and warns that a technical failure on an employer-issued device is a retake at your own expense. You complete a 360-degree room scan of all four walls, a desk scan including under the keyboard, a floor-to-ceiling scan, then a mirror check where you hold a mirror or phone to the webcam to show the screen, keyboard and all four edges of your display. A phone used for that goes out of reach afterward.

None of that is unreasonable. It is just a lot of ways for a sitting to end before it starts. A test center takes the room, the machine, the bandwidth and the software off your list. The cost is a commute and a room with other candidates in it, where ISACA notes some noise should be expected. If the drive is long or no nearby site has availability, remote is a perfectly good option. Just prepare the room like it is part of the exam, because it is.

What should you do the day before?

Keep it short and logistical. Confirm the appointment time and, for a test center, the address and your route. Check your ID: current, valid, original, government-issued, with your name, signature and photograph on one document. Digital IDs and copies are not accepted. The first and last name has to match your ISACA registration, so if you registered under a maiden name or a shortened first name, fix your ISACA profile now, because change requests have to be in at least 48 hours before the appointment.

If you are testing remotely, run PSI's compatibility check on the actual machine and connection you will use. PSI also offers a tutorial test you can run up to three times, though its launch link expires 150 minutes before your scheduled exam time, so the day before is the sensible slot. Clear the desk, decide where the phone goes, and tell the household.

Then stop studying. A last-minute cram will not move a 200 to 800 scaled score, and being tired for four hours of ranking judgment will. For why late cramming is poorly matched to this exam, see how hard the CISA exam actually is.

What happens at CISA exam day check-in?

Plan to arrive at a test center at least 30 minutes before your start time. For remote proctoring, the check-in process opens up to 30 minutes before your appointment, and PSI's secure browser becomes available to download when you click Launch, at least 15 minutes ahead of your exam time. Use the full window either way.

At a center you present the ID, and staff may ask for a second form for verification. If there is any doubt about your identity you will be turned away, which is recorded as a no-show and forfeits the fee. Everything you brought then goes into a locker or designated storage, and you cannot go back to it until the exam is submitted.

The prohibited list applies identically to both delivery modes and is longer than people expect. No reference or study materials, paper, notes, notepads or dictionaries. No calculators. No second monitor. No phones, tablets, smart watches, smart glasses, headphones or earbuds. No bags or purses. No food or drink of any kind, water included. No visitors. You stay facing the screen for the whole exam so the proctor can monitor you, and remote candidates are warned that proctors flag even small movements out of camera view.

On note-taking, be careful with what you read on forums. ISACA's rules bar paper and notes outright, and the current Exam Candidate Guide does not document any on-screen whiteboard or note tool. If your plan depends on scratch space, confirm the rule there before your exam date rather than assuming.

What is the exam interface like?

After you are logged in at the testing station, a tutorial of the exam-taking experience runs before the clock starts. ISACA specifically tells candidates to pay attention to it, which is good advice because it is where the navigation controls are explained.

The platform gives you a running timer, forward and back navigation, and the ability to mark a question and jump back to your marked items later. Interface details change, so treat the tutorial as the authority on the day.

Flagging matters more here than on most exams, because CISA questions carry one best answer among four defensible-looking options, and the MOST, BEST and FIRST qualifiers are designed to make you sit and rank. A flag is how you stop one ranking question from eating six minutes. Mark it, take your best current answer anyway so nothing is left blank, and move. There is no penalty for a wrong answer, so an answered flag beats an empty one. That qualifier pattern is worth drilling in advance, and we cover it in how to answer MOST, BEST and FIRST questions.

How should you pace 150 questions in 4 hours?

Four hours is 240 minutes for 150 questions, which averages 96 seconds each. That is comfortable on a fact question and tight on a scenario with three plausible answers, so the plan is to bank time early and spend it late.

Use four checkpoints and glance at the timer only at those points:

That runs slightly ahead of the raw average and leaves a 30-minute review pass. If you hit the 120-minute checkpoint at question 65 you are not in trouble yet, but stop deliberating and start committing: answer, flag, move. At question 95, you have earned the right to slow down on the hard ones.

The review pass is for flagged items only. Do not reread questions you were confident about. Changing a confident answer at minute 225 is rarely an improvement.

Two breaks are permitted, each 10 minutes or less, with your proctor's permission. The exam is paused while you are away, but the countdown does not stop, and no extra time is given. So a break costs you real exam minutes. Budget it into the plan if you want one, and know that leaving the testing area or your designated testing space without authorization can end the sitting outright.

If the pacing plan is the part you are least sure about, the fix is rehearsal rather than reading. Put two full 150-question timed runs into your last three weeks and treat them as dress rehearsals: same start time as your booked appointment, same break plan, same checkpoint discipline. Stamina is the variable nobody rehearses and everybody feels at question 120. Our CISA study guide includes four full-length practice exams built for exactly that, with every option explained, right and wrong.

What happens when you finish?

You submit, and a preliminary passing status appears on screen straight away. Treat it as an indication only; the score itself comes later. You are not permitted to photograph or screenshot any part of the exam, and that explicitly includes the results screen.

The official result is a scaled score from 200 to 800, with 450 as the pass mark, emailed to the address on your profile and posted in MyISACA under Certifications and CPE Management within 10 working days. Domain-level results come with it for information only; your score is based on total items answered correctly regardless of domain, and some items on your form are unscored pretest questions. Question-level results are never released, and scores are not given out by phone. If you did not pass and you want the paper rechecked, PSI performs rescores on written request submitted through ISACA support within 30 days of results release, for USD 75.

A passing score is not the certification. You still apply, meet the experience requirement and pay the application fee. For how the 450 mark works and why it is not a percentage, read what the 450 scaled passing score means. If you are still mapping out the whole process, start with what the CISA exam is.

FAQ

How early do I need to arrive for the CISA exam?

ISACA tells test center candidates to plan to arrive at least 30 minutes before the exam start time. For remote proctoring, check-in opens up to 30 minutes before your appointment. Being more than 15 minutes late for a testing appointment forfeits your registration fee, so treat the 30 minutes as the plan and not the buffer.

What ID do I need for the CISA exam?

One current, valid, original government-issued ID showing your name, signature and photograph. Accepted types include a driver's license, state ID card, passport, passport card, green card, alien registration or national ID card. Digital IDs and copies are not accepted, and the first and last name must match the name you registered with. The center can ask for a second form for verification.

Can I take a break during the CISA exam?

Yes, two breaks of 10 minutes or less each, with your proctor's permission. The exam pauses but the timer keeps running, and no extra time is added, so the break comes out of your 240 minutes. Leaving the testing area or your designated remote testing space without authorization can end the exam.

When do I get my CISA results?

A preliminary pass or fail status shows on screen as soon as you submit. The official scaled score is emailed and posted in your ISACA account within 10 working days. Domain-level feedback is included for information, but question-level results are not provided.

Is remote proctoring easier than a test center?

It is more convenient, not easier. The rules are identical, and remote adds a private walled room, a clear desk, a 360-degree room scan, a mirror check, the PSI secure browser and a stable connection to your list of things that must go right. If a test center is within a reasonable distance, it removes most of those variables for you.

Looking for a plain-English CISA guide? ISACA CISA: Certified Information Systems Auditor Study Guide covers all five domains with four full-length practice exams, every answer explained.

Simply Certified is an independent publisher. CISA and ISACA are trademarks of ISACA. Our books are independent study material and are not affiliated with, endorsed by, or sponsored by ISACA.