Last updated — September 6, 2026
Eight live sessions over six weeks, built around how ISACA actually asks its questions. Small cohort, marked drills every week, and a full timed mock before you sit the real thing.
Two ways in, one room.
Neither group is a prerequisite for the other. Both sit through the same sessions, and each session is built to be useful to both.
A structured run at the exam
You know the work. You need the credential the job postings ask for, without sitting through fundamentals. Coverage is at exam depth, and every session names where ISACA’s model answer parts company with what real engagements actually do. That gap is what catches experienced candidates out.
Nothing assumed that you have not done
Every session opens by naming the MasterClass topic this domain re-frames, so new material attaches to something you already hold. The audit process in Session 1 is the one you already ran, restated in ISACA’s vocabulary.
One paper, one sitting, one number at the end.
Every design decision in this course traces back to these figures.
How ISACA asks
Almost every question has more than one true answer. The qualifier, BEST or MOST or FIRST or GREATEST, is what separates them, and the winning option is the one an auditor would give rather than the one an engineer would give.
That instinct is trainable, and it is worth more marks than any single domain. It starts in Session 1 and gets drilled in every session after it.
Where the exam puts its weight.
Domains 4 and 5 are 52 percent of the paper between them. Four of the seven teaching sessions go there.
Eight sessions across six weeks.
Weeks 4 and 5 run two sessions each, because Domains 4 and 5 carry the most weight and the most unfamiliar ground.
| Week | Session | Topic | Domain |
|---|---|---|---|
| Week 1 | 1 | Orientation and the Information Systems Auditing Process | D1 |
| Week 2 | 2 | Governance and Management of IT | D2 |
| Week 3 | 3 | IS Acquisition, Development and Implementation | D3 |
| Week 4 | 4 | Information Systems Operations | D4 |
| 5 | Business Resilience | D4 | |
| Week 5 | 6 | Protection of Information Assets, Part A | D5 |
| 7 | Protection of Information Assets, Part B | D5 | |
| Week 6 | 8 | Full mock exam, gap review and exam day plan | All |
Every session runs the same shape.
Two hours, five blocks, so nobody spends attention working out what is happening.
| Block | Time | What happens |
|---|---|---|
| Drill review | 20 min | Last week’s 40 questions, the misses, and why the right answer is right. |
| Bridge | 10 min | The MasterClass topic this domain re-frames, named explicitly. |
| Domain teaching | 60 min | The content, at exam depth, in the terminology ISACA uses. |
| Depth note | 15 min | Where the exam’s model answer differs from real engagement practice. |
| Question clinic | 15 min | Live questions, read aloud, decided as a group. |
The drills are the course
A 40 question drill follows every session and is marked at the start of the next one. Sixteen hours of class time does not pass this exam on its own. The drills are where the retention happens, and the Week 6 mock measures whether it did.
What it costs, and what you get.
- Eight live sessions, two hours each, sixteen hours in total
- A cohort of six students at most, so your drills get marked by hand
- 320 drill questions, written in house, reviewed with you every week
- A full 150 question mock under exam conditions, scored by domain
- A revision plan built from your own gap analysis, not a generic one
Payment plans available.
The first cohort is forming now.
Reserve a seat and you get the dates before they go public, along with first refusal on one of the six places.