Last updated:
CISA preparation guide
What score do you need to pass CISA, and what is the pass rate?
You need a scaled score of 450 or higher on ISACA's 200 to 800 scale to pass CISA. That 450 is not a percentage: ISACA converts the number of scored questions you answer correctly to a common scale so that different exam versions are comparable, and it does not publish how many correct answers 450 takes. ISACA's candidate guide and CISA pages give no CISA pass rate either, so the figures quoted online cite no ISACA source.
CISA is 150 questions in 4 hours. ISACA's candidate guide calls 450 "the minimum standard of knowledge", with 800 a perfect score and 200 the lowest possible.
If you are looking for a number to measure yourself against, the score report is more useful than any pass rate. Each line on it tells you something specific about where you stand.
Start CISA baselineYour CISA score report, line by line
| What you see | What it means |
|---|---|
| 450 or higher | A pass: ISACA's minimum standard of knowledge. |
| 800 | Every scored question answered correctly. |
| 200 | The lowest possible score. |
| Domain results | For information only. They are not used to calculate your score, which counts all scored questions together. |
| Pass or not-pass status on screen | Your preliminary status, shown straight after the exam. |
| Official score, by email and in MyISACA | Arrives within 10 working days. If you passed, ISACA sends details on how to apply for certification. |
| Individual questions | Not shown. ISACA provides no question-level results. |
| Pass rate | Not on the report. ISACA does not publish one. |
A worked example
Ana sees not pass on the screen. Her official report arrives a week later with a scaled score of 431. Domain 1 looks strong, and Domain 5 is well below the others.
The 431 tells Ana she was below ISACA's standard across the whole exam. It cannot tell her how many more correct answers she needed, because ISACA does not publish that. Her domain results are not used to calculate the score, but they are her best guide to where to look, and Domain 5 carries 26% of the exam. If she doubts the result she can ask for a rescore (US$75, within 30 days). If this was her first attempt, her earliest retake is 30 days after it: time for focused work on Domain 5 and a set of fresh mixed questions.
What 450 means, and why it is not 56%
450 out of 800 is a point on ISACA's scale, not 56% of the questions. ISACA turns your raw result, the number of scored questions you answer correctly, into a scaled score so that results from different versions of the exam mean the same thing.
All scored questions count toward one total, and ISACA's guide describes no difficulty weighting. Some questions are unscored pretest items, so answer every one: there is no penalty for a wrong answer.
Why there is no reliable CISA pass rate
ISACA does not publish a CISA pass rate in its candidate guide or on its CISA pages. Pages that quote one give no ISACA data behind it, and scores people share in forums come mostly from those who chose to post.
Even a real pass rate would describe other candidates, not you. What you can measure is your own preparation.
What to watch instead: your own evidence
Your own practice answers the question a pass rate cannot. Check that no domain is left thin (Domains 4 and 5 carry 26% each, Domains 1 and 2 carry 18% each and Domain 3 carries 12%.), that your results hold on questions you meet for the first time, and that misses you were sure about are becoming rarer. All 5 domains count toward the one score.
CertArc is independent practice with original CISA scenarios. You choose Confident, Unsure or Guess before each answer is revealed, so your results show which misses you were sure of. Its readiness score is a preparation signal, not a pass prediction, and its practice percentages do not convert to ISACA's scale.
If you pass
You then have five years to apply for certification; the CISA requirements guide covers the experience rules and the application.
If you do not pass
A not-pass result leaves you clear next steps, and the score report shows where to look. If you believe the score is wrong, send ISACA a rescore request in writing (US$75) within 30 days of the results being released.
You can sit CISA four attempts in any rolling 12 months. The waits are 30 days, then 90, then 90, and every attempt is a new registration at the full fee. Start with the domains your report shows lowest, even though domain results are not used to calculate the score.
Frequently asked questions
What is the CISA passing score?
450 or higher on ISACA's scaled range of 200 to 800.
Is 450 out of 800 a percentage?
No. It is a point on ISACA's 200 to 800 scale, converted from the number of scored questions you answer correctly.
How many questions do I need to get right to pass CISA?
ISACA does not publish that number. It reports a scaled score so that different versions of the exam are comparable.
What is the CISA pass rate?
ISACA does not publish one in its candidate guide or on its CISA pages, so figures quoted online cite no ISACA source.
Do I need a minimum score in each domain?
No. ISACA scores the exam as a whole; domain results are for information only.
Are harder questions worth more?
Not as far as ISACA says: the score is the total of scored questions answered correctly, and its candidate guide describes no difficulty weighting.
When do I get my CISA score?
You see a preliminary pass or not-pass on screen, then the official score by email and in MyISACA within 10 working days.
Can I see which questions I got wrong?
No. ISACA provides no question-level results.
Is the 450 passing score the same for CISM and other ISACA exams?
Yes. ISACA's candidate guide covers CISA, CISM, CRISC, CGEIT and CDPSE, and uses the same 200 to 800 scale with 450 to pass.
Does my CertArc practice percentage convert to a CISA score?
No. Practice percentages do not convert to ISACA's scale and do not predict a result.
Sources and limits
Exam scope and weights: ISACA CISA exam content outline. Certification eligibility: ISACA certification requirements. Other sources: ISACA 2026 exam candidate guide (scoring, results, rescore, retakes); ISACA CISA certification page; ISACA CISA certification requirements (five-year window). Checked 2 November 2026.
Study methods and examples are independent CertArc teaching guidance. Practice results do not convert to an official score or guarantee a pass. CertArc is not affiliated with or endorsed by ISACA.
