Start free

← Free roadmaps

Free CISA — Certified Information Systems Auditor Roadmap

The audit and assurance certification. The standard credential for IT audit, and increasingly asked for in compliance-heavy sectors. The main course is short on Domains 3–5; the continuity course in Step 4 and the control labs in Step 3 fill part of the gap.

5 steps · 10 free videos · 6 free reads

Start step 1 →

Create your free account to open all 2,396 free items

The 16 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.

Create free account →Already have an account? Sign in

Before you start

Read these first

The free roadmap

5 steps, in order

The 🔒 rows show what the full roadmap adds at each step. StationX Membership opens every course and its labs: $299 / year ($24.92/mo billed annually).

  1. Start here →

    Step 1 — Learn the CISA domains

    Audit process, governance, acquisition, operations and asset protection: the five domains, by the current outline's names.

    🔒 The full roadmap adds here: 1 full course (Membership)
    • Course · ISACA - Certified Information Systems Auditor - CISA · 🔒 Membership
    See this step on the full roadmap →

    Try a free cloud security lab: Left open (~4 min) → A scripted simulation in your browser. No account needed.

  2. Step 2 — Governance, risk and the three lines of defence

    How governance, risk and controls fit together, and where IT audit sits as the third line of defence.

    🔒 The full roadmap adds here: 1 full course (Membership)
    • Course · Mastering Governance, Risk, and Compliance (GRC): A Handbook · 🔒 Membership
    See this step on the full roadmap →
  3. Step 3 — Controls in practice

    See the controls you will audit, working on real systems.

    🔒 The full roadmap adds here: hands-on labs 1–24 of 24 (Membership)
    • Lab 1 of 24 · Auditing Service Accounts and Setting Up Automated Log Collection · 🔒 Membership
    • Lab 2 of 24 · CIRP Creation and Disaster · 🔒 Membership
    • Lab 3 of 24 · Comparing Controls · 🔒 Membership
    • Lab 4 of 24 · Creation of Standard Operating Procedures for Recovery · 🔒 Membership
    • Lab 5 of 24 · Identifying Key Assets · 🔒 Membership
    • Lab 6 of 24 · Monitoring and Verifying Management Systems · 🔒 Membership
    • Lab 7 of 24 · Sensitive Information Identification · 🔒 Membership
    • Lab 8 of 24 · BCP DRP and Test Planning · 🔒 Membership
    • Lab 9 of 24 · BitLocker Setup · 🔒 Membership
    • Lab 10 of 24 · Block Incoming Traffic on Known Port · 🔒 Membership
    • Lab 11 of 24 · Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server · 🔒 Membership
    • Lab 12 of 24 · Creation of BCP and DRP · 🔒 Membership
    • Lab 13 of 24 · Data Backup to Prep for Recovery · 🔒 Membership
    • Lab 14 of 24 · Event Log · 🔒 Membership
    • Lab 15 of 24 · Host Data Integrity Baselining · 🔒 Membership
    • Lab 16 of 24 · Installing Patches and Testing Software · 🔒 Membership
    • Lab 17 of 24 · MITRE - Attack · 🔒 Membership
    • Lab 18 of 24 · MITRE - Defend · 🔒 Membership
    • Lab 19 of 24 · Network Discovery · 🔒 Membership
    • Lab 20 of 24 · Network Segmentation (FW/DMZ/WAN/LAN) · 🔒 Membership
    • Lab 21 of 24 · Network Topology Generation · 🔒 Membership
    • Lab 22 of 24 · Open Source Collection · 🔒 Membership
    • Lab 23 of 24 · Windows Event Log Manipulation via Windows Event Viewer · 🔒 Membership
    • Lab 24 of 24 · Wireshark · 🔒 Membership
    See this step on the full roadmap →
  4. Step 4 — Business resilience

    Business continuity and disaster recovery planning — the resilience half of Domain 4 (26%).

    🔒 The full roadmap adds here: 1 full course (Membership)
    • Course · Business Continuity and Disaster Recovery Planning · 🔒 Membership
    See this step on the full roadmap →
  5. Step 5 — Land the audit job

    Prepare for an IT auditor interview.

    🔒 The full roadmap adds here: 1 full course (Membership)
    • Course · IT Auditor Interview · 🔒 Membership
    See this step on the full roadmap →
Exam and next steps

Before the exam

Do it hands-on

The full CISA — Certified Information Systems Auditor roadmap

The same steps with every course and the hands-on labs, and your progress tracked.

The full roadmap with labs →What Membership includes · Full refund within 30 days if you haven't started a lab · cancel anytime
Advanced

AI-Driven Security Engineering

Become the Cyber Security Expert the AI Era Needs.

StationX’s AI Master’s teaches you to create and deploy security solutions by directing AI. “No coding background required. You direct the AI; the AI does the building.”

Explore the AI Master’s →
2,396 free items open with a free accountCreate free accountSign in