Exampractice
Cybersecurity

CISA Exam Day Checklist

What to do before and during your CISA exam appointment — arrival rules, breaks, remote proctoring pitfalls and a pacing plan for the 150 questions.

Alexander Novak · 6 min read
Flat-lay of identification, exam confirmation email and keys laid out the morning of a CISA exam appointment.

On the day of your Certified Information Systems Auditor (CISA) exam, three numbers matter more than anything you revise: arrive 30 minutes early, because being more than 15 minutes late forfeits your appointment and your fees; you have 240 minutes for 150 multiple-choice questions; and with the proctor's permission you may take two breaks of up to 10 minutes each. Everything below organises the day around those rules.

This checklist covers logistics only — check-in, the testing environment, pacing and what happens at the end. If you are still choosing study tactics, that lives in the CISA study schedule for working professionals; the syllabus itself is broken down in the CISA exam domains explainer.

One week before

  • Reconfirm the appointment. ISACA delivers CISA through PSI, either at a test centre or by online remote proctoring. Open your confirmation email and check the date, start time, time zone and modality you actually booked — time-zone confusion is a self-inflicted way to hit the 15-minute forfeit rule.
  • Check the identification requirements against your documents now, not on the morning. Your confirmation and ISACA's exam-day instructions specify the acceptable forms of ID; verify that the name on your ID matches your registration exactly, and that the document will not expire before exam day. If anything is off, a week gives you time to contact ISACA/PSI support; an hour before check-in does not.
  • Know your escape hatch. Rescheduling is free during your eligibility period if done at least 48 hours before the appointment. Genuinely ill, or facing an unavoidable conflict? Move the date before that cut-off rather than gambling your non-refundable fees (US$575 member / US$760 non-member, as of 2026).
  • Test-centre candidates: do a dry run of the journey, or at least map it at the same time of day, and locate parking.
  • Remote candidates: run PSI's system compatibility check on the actual computer and network you will use, and plan the room — private, quiet, and clearable of papers, extra monitors and devices per the proctoring rules in your confirmation.

The night before

  • Lay out your ID and confirmation details; charge your phone (for travel, not for the exam room — personal items stay outside).
  • No new study material. A last-minute pass through unfamiliar topics buys anxiety, not marks. Light review of your own notes at most, then stop.
  • Set two alarms if your appointment is early, and work backwards from "arrive 30 minutes before start time" to fix your departure hour.
  • Eat and sleep as normally as you can. Four hours of sustained concentration is an endurance event; sleep is the only preparation left that still moves the needle.

Check-in: test centre vs remote

At a PSI test centre, arrive 30 minutes ahead. Expect identity verification and the centre's security procedure, and expect to leave personal belongings — phone, watch, notes, bag — outside the testing room per the centre's rules. Follow the staff's instructions on what is permitted at your workstation; policies are set by ISACA and PSI, so treat your confirmation email's instructions as authoritative over anything you have read elsewhere, this page included.

For online remote proctoring, "arriving" means starting check-in early on a machine that has already passed the system check. You will verify your identity and your environment with the proctor; a cleared desk and a closed door are the price of taking the exam from home. The most common remote failure modes are avoidable ones: someone entering the room, a second monitor left connected, or an unstable connection. Treat the proctor's instructions as non-negotiable — a policy violation can end the session.

Either way, the 15-minute rule is the same: turn up (or log in) more than 15 minutes late and your fees are forfeited.

Pacing the 150 questions

240 minutes across 150 questions gives you 96 seconds per question — comfortable, provided you refuse to let any single question eat five minutes. A simple pacing frame:

  1. Checkpoint arithmetic. At the two-hour mark you should be at or past question 75. Check roughly every 25 questions rather than every question; clock-watching costs focus.
  2. First pass for momentum. Answer what you know, flag what you do not, and keep moving. An unanswered easy question at the end of the exam is the most expensive mistake available.
  3. Second pass for flagged items. Return with your remaining time and give each flagged question a fair, bounded reconsideration. Answer everything — there is no reason to leave blanks on a multiple-choice exam.
  4. Budget the breaks deliberately. Two optional breaks of up to 10 minutes each are available with the proctor's permission on the core ISACA exams. A short break near halfway resets concentration for most candidates; just remember break logistics follow the proctor's process, not your own timing.
  5. Trust your practice-test rhythm. If you ran a timed 150-question simulation in your final fortnight, exam-day pacing is a repeat performance, not an improvisation. That habit-building is covered in the CISA practice test strategy guide — on the day itself, you simply execute it. If you have not yet done a full timed run, ExamPractice's practice-test simulation exists for precisely that rehearsal.

One mindset note: CISA questions often present four defensible options and ask what an auditor should do first or best. When torn, answer from the auditor's perspective — assurance, evidence, reporting — rather than the technician's. That single habit resolves more coin-flips than any memorised fact.

When you click submit

You will see a preliminary pass/fail result on screen immediately, with the official score — on the 200 to 800 scale, where 450 or above passes — released online and by email within 10 working days.

If the preliminary result is a pass: congratulations, and note that passing the exam does not make you certified. You have five years from your pass date to apply for CISA certification, evidencing the required professional experience, and ISACA charges a US$50 application processing fee. Put a reminder in your diary before the celebration dinner.

If it is a fail, park the verdict until the official score arrives with per-domain feedback — the retake path (a 30-day wait before a second attempt, then 90 days after later attempts, up to four attempts in a rolling 12-month period) has its own playbook in the CISA retake preparation guide.

The condensed checklist

  • [ ] Appointment date, time, time zone and modality reconfirmed
  • [ ] ID valid, unexpired, name matching registration
  • [ ] Journey planned (centre) or system check passed and room prepared (remote)
  • [ ] Reschedule decision made before the 48-hour cut-off, if needed
  • [ ] No new study material in the final 24 hours
  • [ ] Arrival 30 minutes before start time
  • [ ] Pacing frame: checkpoints, flag-and-move, answer everything
  • [ ] Break plan: up to two 10-minute breaks, with proctor permission
  • [ ] Post-exam: await official score within 10 working days; apply for certification within 5 years of passing

The day is won earlier than you think

Almost every exam-day disaster — the wrong time zone, the expired ID, the failed system check, the blown time budget — is preventable in the preceding week, which is why this checklist front-loads its work. Get the logistics locked down seven days out, rehearse the four-hour format once, and exam day becomes what it should be: a tired but uneventful demonstration of things you already know. And if you still have that final week in hand, a last timed run through some CISA practice questions is a better use of it than any new textbook chapter.

Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.

Put it into practice

Test what you have just read

Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.

You may also like