- You are here:
- Home »
- Blog »
- CISA Exam Information »
- How CISA Exam Scoring & Grading Works [2026 Update]
How CISA Exam Scoring & Grading Works [2026 Update]
Do you have questions about the CISA passing score and how the CISA exam is graded? You’re not alone. After all, most candidates have the same questions about this exam. Therefore, continue reading to learn more about how the CISA is graded and how to prepare for it.
First of all, the CISA exam only consists of multiple-choice questions. To be more specific, there are 150 questions on the CISA exam, each with a list of possible answers. A small portion of the questions are included for research and analysis only and therefore are not graded. Still, it’s important to understand the questions to understand how the scoring works. (But more on that later.)
The more you learn about how CISA exam scoring works, the better prepared you will be for passing the exam. Besides, most people hope to pass on the first try. However, you can only take the exam up to four times within a one-year window, but there are some nuances that we cover in our retake section.
How the CISA Exam Scoring Works
To start, it’s critical to understand how the CISA exam passing score is calculated. After a candidate completes the exam, the raw score is collected and converted into a point scale between 200 and 800.
Here’s how it works, in a nutshell. Basically, the ISACA starts with your raw score, which is how many of the 150 questions you answered correctly. Then, it uses a common scale to convert that raw score to a number as low as 200 and as high as 800. The resulting scaled score represents a candidate’s potential as a Certified Information Systems Auditor, despite small differences in exams over the years.
So, basically, the process is this: raw score (how many questions you got right) –> converted onto a fixed scale between 200-800.
Why Does ISACA Use Scaled Scores?
Scaled scoring is fairly normal is standardized testing. Most exams, like CISA, serve candidates with multiple questions with varying degrees of difficulty. Like the CPA Exam, the CISA exam is adaptive. Candidates who perform better on questions will notice the questions they see get more difficult. On the opposite end, a struggling candidate may perceive their questions getting easier as they go along. Also, some questions are pre-test questions and don’t count toward the total score.
Because you won’t know which questions are pre-test (not graded) or weighted questions, there isn’t a way to know what percentage of questions you need to answer correctly. On the exam, instead of trying to figure out which questions are getting more challenging or seem like they might be pre-test, do the best you can on each one. In the end, you’re looking to get a scaled score of 450 or better, and since you only receive credit for the questions you answer correctly, don’t skip any or blindly guess; always problem solve or make an educated guess before moving on.
CISA Passing Score Scaling:
- A scaled score of 450 or higher represents the minimum consistent standard of knowledge as established by ISACA’s certification working groups.
- If candidates receive a perfect score of 800, they answered all questions correctly.
- In contrast, candidates who score 200 only answered a small number of questions correctly.
- Each content area or domain has a corresponding scaled score. However, the overall score is not simply an average of the scaled score of each domain.
- The domain percentages represent the relative amount of test questions on the exam for that domain. Furthermore, the passing score is based on the questions in total.
- ISACA provides score feedback for each domain to provide insight into a candidate’s areas of strength. Candidates can also use this feedback to improve areas that may need more development.
But I still don’t understand how the scaled score is calculated…
Seriously, don’t worry about it. The CISA exam scoring system is fair, even if it’s difficult to understand. As a result, it is better to focus your time and energy on exam preparation.
With that in mind, let’s explore pass rates, CISA results, and other information you need to know about scoring.
CISA Pass Rate
You’re probably curious about the CISA pass rate and your chances of passing on the first go. Regardless, the ISACA does not release the exact figures on the CISA pass rates.
Still, most experts claim that the pass rate is around 50%. However, these are only estimates. Some experts also assume that the pass rates are rising for CISA. This increase in the CISA exam pass rate is due, in part, to the availability of study materials. After all, CISA review courses were not as widely available in the past.
But if you want more information about pass rates, you can search online forums. Oftentimes, CISA Certification candidates post their results and give advice to others preparing to take the exam.
Increasing the CISA Pass Rate
If the average CISA pass rate is around 50%, then you need to know how to increase your chances of passing. First, keep in mind that the pass rate is only an indication of your chances to pass. And just because half of the people who attempt the exam fail, that doesn’t necessarily mean you’ll fail, too.
After all, if you already work in a field that the CISA job description covers, then you have an increased chance to pass the exam. Honestly, the exam focuses less on the memorization of facts and figures. In contrast, you answer questions about responding to real-life scenarios. Therefore, people who work in these fields already will have the advantage to pass.
Plus, some people take the CISA exam as a “casual taker” without much preparation. In comparison to the CPA or CIA exams, the CISA requirements don’t have a minimum education component. For instance, you don’t need a bachelor’s degree to take the CIA exam. As a result, the CISA exam can attract candidates who don’t take enough time to properly study. And the CISA certification pass rate likely reflects this reality.
Therefore, to increase your chances of gaining a CISA pass mark, you simply need to take the exam seriously. Plus, you should study with the right CISA exam materials.
Study to Reach a CISA Passing Score
The best way to be happy with your CISA exam results is to study with a good review course. Here are three affordable CISA review options, all available on Udemy
- Hemang Doshi’s course for ISACA’s Certified Information System Auditor (CISA) Exam
- Highly rated by exam candidates, Hemang Doshi provides 17.5 hours of on-demand video, notes, and practice questions.
- 900 Practice Questions from CyberCert Education Institute
- Best for candidates who just want to drill questions, this offering includes 6 practice exams and answer explanations
- CISA®-Aligned 2026 – Information System Auditor Training
- Udemy’s highest rated CISA course with ~43 hours of lectures, practice quizzes, and full mock exams.
With all of these online courses, there are no long, multi-day boot camps to attend. You can study on your own time; I still recommend pursuing the ISACA CISA practice quiz before your actual exam.
CISA Exam Results Release
After you take the CISA exam, you’ll receive your results at two different times.
First, your CISA exam preliminary results will be available as soon as you finish your test. That is, you can view your CISA preliminary pass result (pass or not pass) on the screen immediately after your exam. Next, ISACA will email your official score and make it available online within 10 business days from your exam date. Your scores will also be available in your profile at the My ISACA >Certifications & CPE Management page of the ISACA website. If you pass, you will receive details on how to apply for certification.
Here’s some additional information about CISA results:
- Due to confidentiality, you won’t be able to request the CISA exam results by phone or fax.
- ISACA will send an encrypted email notification to the email address listed on your profile.
- In addition, ISACA will not send exam scores through the post office.
- What’s more, the ISACA cannot provide question-level results.
If you do not receive your official score within 10 days of taking the exam, you should contact ISACA. They will be able to provide you with additional assistance.
What You Will See in the CISA Certification Score Report
I understand that you may be curious about what your CISA score report will reveal. With this information, you can learn more from your CISA exam passing score percentage. To start, ISACA breaks down your score into the five domain areas. The sub-scores can help you identify stronger and weaker areas in case you need a retake.
Even if you pass, it can be very helpful to review this information because it will, again, show you your strengths and weaknesses.
Candidates who fail the CISA exam can ask for a rescore. According to the ISACA, the likelihood that your CISA preliminary not passed result was incorrect is very slim. Still, if you worry that conditions could have interfered with the computer scoring, you can request a rescore. However, this request costs $75 and has to be submitted within 30 days of the score release.
Additionally, candidates have 5 years from their passing date to apply for certification. To become certified, each exam passer must complete all of the CISA requirements, including submitting an application for certification.
Has CISA Job Practice Scoring Changed in 2026?
The process of scoring the CISA exam remains the same. That is, ISACA continues to convert raw scores to scaled ones.
How to Request a CISA Rescore
ISACA provides this info on how to request a rescore of your CISA exam:
“While we are confident in the integrity and validity of our scoring procedures, you may request a rescore if you do not pass the exam. Rescores are performed by PSI.
You must submit a rescore request in writing here within 30 days following the release of your exam results.
- Requests for a rescore after 30 days will not be processed
- All requests must include a candidate’s name, ISACA identification number, and mailing address
- A fee of US $75 must accompany each request”
Retaking the CISA Exam in 2026 or 2027
If you failed your latest exam attempt, all is not lost. ISACA allows you to retake the exam up to four times within a rolling 12-month period. Things to note:
- Each time you retake the exam, you must pay the full registration fee again (that’s right: prepare to fork over another $575 for ISACA members and $760 for nonmembers).
- For your second attempt, you must wait 30 days from the date of attempt #1 (e.g., if you take the exam for the first time on October 1, you have to wait 30 days from then to sit for your retake)
- For attempts 3 and 4, candidates have to wait:
- 90 days after the second attempt for attempt #3
- 90 days after the third attempt for attempt #4
Ensuring You Get a Good CISA Score
Of course, if you want to get a good score on the CISA exam, it’s imperative to study properly. Therefore, we have some great study aids and practice exams to help you. We also have tips for CISA exam prep.
Here are some basic tips to ensure you get a good score:
- Create a study plan and take it seriously
- Invest in quality exam prep and guides
- Become familiar with the 5 domains and what is covered within
- Study with practice tests as much as possible
Understanding the Questions
To ensure you get a good CISA score, you also need to understand the questions. Besides, they are not “yes” or “no” questions or simple things you just memorize and then answer back. Alternatively, you’ll have to read scenarios and pick an appropriate response from a list of several choices.
Questions with Multiple Possible Answers
You may run across questions that seem likely to have multiple possible answers. Don’t let this trip you up. Instead, keep in mind that one of the answers is the “best” choice, even if other choices might seem correct at first glance.
What the CISA Certification Exam Covers
Do you know what the CISA exam covers? To understand the CISA exam scoring also helps to understand what will be on the exam itself. To that end, let’s take a look at what type of content can be found on the CISA exam.
The CISA exam syllabus addresses five domains as listed below.
CISA Exam Syllabus: The 5 Domains
The CISA exam has 5 different sections that test your knowledge of 5 content areas or domains. In essence, these domains cover the knowledge that CISA-holders need to succeed in their careers. The domains and their percentage of the total CISA exam are:
- First Domain: Information System Auditing Process (18%)
- Second Domain: Governance and Management of IT (18%)
- Third Domain: Information Systems Acquisition, Development, and Implementation (12%)
- Fourth Domain: Information Systems Operations and Business Resilience (26%)
- Fifth Domain: Protection of Information Assets (26%)
When you fully understand the CISA exam and have adequately prepared, you won’t worry so much about how it is graded and scored. Consequently, you can take confidence in your ability to pass because you’ve done the proper prep work.
5 Domains of the CISA Job Practice
Sometimes, the 5 domains are also referred to as “job practice” areas, since they reflect what practitioners do in real life. They exactly match the 5 domains of the CISA exam syllabus.
In addition to the 5 domains, the ISACA has also outlined 43 tasks that CISA holders should be able to complete. These tasks are fairly straightforward and shouldn’t cause you any concern. They were added to include knowledge areas that directly indicate the content of the CISA exam and tasks to identify the context for how the knowledge is used in practice.
How the CISA Exam is Graded Conclusions
Hopefully, this post has helped you to make some sense of how the CISA exam is graded. I understand that this process can be confusing for candidates, especially if this is your first credential exam of this type. However, you will find a lot of helpful information on our site about how to pass the CISA exam. In this regard, you can be more prepared for the testing and scoring process.
If we’ve missed anything you would like to know, leave us a comment with your questions and concerns. Good luck!
About the Author Stephanie
I am the author of How to Pass The CPA Exam (published by Wiley) and the publisher of this and several accounting professional exam prep sites.
