CISA Results: How to Read Your Score Report and Act on It

When do preliminary and official CISA results arrive?

ISACA's Certification Exam Candidate Guide says you receive a preliminary CISA result immediately after the exam and the official result within 10 working days, by email and in your ISACA account. The preliminary result and the official score are different stages; neither, by itself, awards the CISA certification.

These result-delivery rules were checked November 3, 2026. Keep three events separate when deciding what to do next:

Ten working days does not mean ten calendar days. If the official result has not appeared after the stated window, check both your email and account, then contact ISACA Support with your exam date and account details. That is a practical follow-up step, not a promise of a particular support response time.

Do not wait for the score release to report an administration problem. ISACA's separate 48-hour reporting window starts after the test, as explained below.

Where do you find the official report, and which number matters?

Check the official result delivered to your ISACA account as well as the result email. Read the overall outcome before interpreting individual domains. ISACA reports CISA scores on a scale from 200 to 800, with 450 or higher required to pass, under the rules checked November 3, 2026.

The number 450 is a scaled score. Dividing it by 800 does not produce the percentage of questions you needed to answer correctly. The exam also includes unscored pretest items, so counting every presented question as a scored item would be another mistake.

ISACA bases the score on the total number of scored items answered correctly. Domain results are informational; they are not separate pass-or-fail decisions that you should combine into your own overall result. For the broader format and content map, see the five CISA domains and exam format.

If you are preparing for another attempt, record your practice errors separately from your official score. The 1,350 questions in full ISACA CISA prep planned for launch provide material for further practice; the quantity is a product description, not a conversion between a practice percentage and an official CISA result.

Before closing the report, note its release date. That date matters if you are considering the rescore process.

What can domain results tell you?

Domain feedback can help you decide what to investigate in your preparation. It does not identify the cause of a weak result by itself. A topic may be unfamiliar, you may have misread what a question asked, or you may have struggled to apply something you could define correctly. Treat those as possibilities to test in fresh practice, not conclusions that ISACA printed on your report.

Use a small worksheet to turn feedback into a next action. The following is an editorial example, not a copy of ISACA's report labels or an official scoring method:

Avoid turning a domain result into an estimated number of missed questions. Also avoid dropping every stronger area from your schedule: the overall result still concerns the scored exam as a whole.

Start with the 20 free CISA practice questions. For each answer you miss or guess, write down what you would need to understand to answer a different question on the same idea. This is a diagnostic exercise, not a practice-score threshold for passing.

For continued review, full ISACA CISA prep planned for launch is organized across the five domains. Use that structure to keep broader coverage alongside the areas your report prompts you to revisit.

When should you request a rescore or report an exam problem?

These are different processes with different deadlines. Under the candidate-guide rules checked November 3, 2026:

For a rescore request, the guide lists your name, ISACA ID and mailing address. Read the current rescore instructions for the submission method and any applicable fee before sending it. A request does not establish that a score is wrong or guarantee a changed result.

For an administration concern, describe the problem factually and promptly. Keep your account of the event separate from your opinion about the score. Do not assume that waiting for official results preserves the shorter reporting window, or that a later rescore request substitutes for reporting what happened during the appointment.

If both concerns apply, identify each separately when contacting ISACA. Ask which process applies to your circumstances rather than assuming one request covers both.

What should you do after a pass or a fail?

After an official pass, move to the certification application requirements. ISACA's Get CISA Certified page says the official scores must be released before the application payment and application steps, and you must apply within five years of passing. These requirements were checked November 3, 2026. Passing alone does not establish that you meet the experience and verification requirements.

Use the CISA requirements, experience and costs guide to check the route that fits your record. Keep the exam result separate from certification status when describing your progress.

After a fail, turn the report into a manageable study plan before choosing another appointment. Put your identified review tasks into the free CISA study plan, and use the CISA retake study plan for the waiting periods and preparation sequence. A weak domain is a starting point for investigation, not an instruction to repeat all your previous studying unchanged.

Once you have addressed those gaps, a longer practice session can help you check your own consistency across a larger set. A 150-question mock exam is planned for launch as part of full ISACA CISA prep. Treat your performance as further practice evidence, not a predicted official score.

Your immediate next step is to identify which stage you are in: waiting for the official result, preparing a certification application, or organizing a retake. Then record the relevant date and complete the next action for that stage.

<!-- Writer self-check, November 3, 2026: G4 supports delivery, score interpretation and rescore rules; G5 supports the administration deadline; A1–A2 support the certification distinction and application timing. Product claims match CONTEXT.md. Worksheet and follow-up advice are editorial. No 2027 focus is assigned to this PLAN entry. No rescore fee, raw conversion, report label, appeal outcome or practice prediction is asserted. Three spaced commercial links, both existing-guide links, both free tools, and two official sources checked. Independent review remains required. -->