The 2024 CISA outline and the CISA Associate, explained
Two recent changes shape the CISA. The exam content outline updated on August 1, 2024, adding cloud, privacy and AI-driven systems across the same five domains. And since July 2025, ISACA members who pass but lack the five years of experience can hold the CISA Associate designation ($25) while they build it.
CISA Associate details from ISACA’s July 2025 announcement; outline date and domain weights as reported from ISACA’s 2024 content outline. Checked October 11, 2026.
The five domains (2024 outline)
| Domain | Weight (reported) |
|---|---|
| 1. Information Systems Auditing Process | 18% |
| 2. Governance and Management of IT | 18% |
| 3. Information Systems Acquisition, Development and Implementation | 12% |
| 4. Information Systems Operations and Business Resilience | 26% |
| 5. Protection of Information Assets | 26% |
Weights as reported from ISACA’s 2024 exam content outline; confirm on isaca.org.
The CISA Associate
- For: ISACA members who pass the CISA exam but don’t yet have the required experience.
- Cost: a $25 application fee after passing.
- Upkeep: no CPE, but you must keep an active ISACA membership.
- Expires: after four years, or when you become fully CISA certified.
What it means for you
- Use materials updated for the August 2024 outline; older books miss the cloud and AI content.
- Domains 4 and 5 together are about half the exam; weight your study accordingly.
- Students can pass early, hold the Associate designation, and certify once they have the experience.
Official source & community discussion
ISACA: CISA Associate announcement (official) →
See related questions on Quora →