CISA Study Kit · 12-week plan

Progress Tracker & Wrong-Answer Log

Print this, or keep it open beside your notes. The wrong-answer log is the highest-value document in this kit — the plan assumes you keep it, and Week 12 revision is built on it.


Part 1 — Weekly tracker

Fill in as you go. The "Practice %" column is your earliest warning sign.

WkDates (2026)DomainPlanned hrsActual hrsQs donePractice %Done?Notes
1Oct 5–11D1A630☐
2Oct 12–18D1B650☐
3Oct 19–25D2A640☐
4Oct 26–Nov 1D2B650☐
5Nov 2–8D3660☐
6Nov 9–15D1–D3 review775 (half-mock)☐Target ≥ 60%
7Nov 16–22D4A660☐
8Nov 23–29D4B660☐
9Nov 30–Dec 6D5A660☐
10Dec 7–13D5B660☐
11Dec 14–20Full mock + remediation7150 + 80☐Target ≥ 70%
12Dec 21–27Taper3light☐EXAM Tue 22 Dec
Total~73~700

Running totals

  • Total hours logged: ______ / 73
  • Total questions answered: ______ / 700
  • Highest mixed-timed score so far: ______ %
  • Score trend (last 3 sets): ____ % → ____ % → ____ %

Part 2 — Wrong-answer log

The only column you revise in December is "The rule". Everything else is context.

Copy this row for every miss. Aim for fewer than 15 open entries by 20 December.

#DateDomainQ refI pickedCorrectWhy I was wrongTHE RULEClosed?
1☐
2☐
3☐
4☐
5☐
6☐
7☐
8☐
9☐
10☐
11☐
12☐
13☐
14☐
15☐

Worked example — this is the standard to aim for

#DateDomainQ refI pickedCorrectWhy I was wrongTHE RULEClosed?
112 NovD4 — change mgmtQAE 412"The DBA should approve the change""The change advisory board should approve"Confused technical authority with change authorityChange approval belongs to the CAB with business representation — never to the implementer or the technical owner☑

Note what makes that row useful: the rule is portable. It applies to hundreds of differently-worded questions, not just to question 412.

Anti-patterns to avoid in this log

  • ❌ "I didn't know it" — useless. What specifically didn't you know?
  • ❌ "Careless mistake" — usually a real rule you hadn't formed. Find it.
  • ❌ Copying the explanation verbatim — you won't re-read a paragraph. Compress it to one portable rule.
  • ❌ Logging everything — if a question was genuinely ambiguous, note it and move on.

Part 3 — Domain confidence self-rating

Rate 1 (lost) to 5 (could teach it) at three checkpoints. Where you rate yourself 1–2, that is your revision priority — and compare it against the domain's exam weight.

DomainWeightWk 6Wk 9Wk 11Priority if ≤2
D1 Auditing Process18%Moderate — but don't over-invest
D2 Governance & Mgmt of IT18%Moderate
D3 Acquisition/Dev/Impl12%Lowest — compress if behind
D4 Operations & Resilience26%Highest
D5 Protection of Info Assets26%Highest

Weight your effort by the exam's weighting, not by how interesting you find the topic. A domain worth 26% failing at 2/5 costs you far more than a 12% domain at 2/5.


Part 4 — Readiness gate (fill in on 17 December)

CriterionTargetActualPass?
Can state 5 domains + weights from memoryYes☐
Can classify any control (purpose and nature)Yes☐
Mixed timed 150-Q score≥ 70%☐
Completed a full 4-hour timed mockYes☐
Open wrong-answer log entries< 15☐
Can recite RTO/RPO/MTD, IR lifecycle, order of volatility, cutover & recovery-site trade-offsYes☐

If you fail 3 or more of these → move the exam to January 2027. A moved exam is free. A failed attempt costs 30+ days and a new voucher.


Part 5 — Final week checklist

  • ☐ Stop new material after Sunday 20 December
  • ☐ Re-read the cheat sheet (twice), your own domain summaries, and the "rule" column of the wrong-answer log
  • ☐ Confirm test-centre address, travel time, and acceptable photo ID
  • ☐ Confirm the reschedule deadline and fee (know it before you need it)
  • ☐ Do not sit a full mock on 21 December
  • ☐ Sleep properly both nights
  • ☐ Exam morning: cheat sheet only. Nothing else
  • ☐ Answer every question — there is no penalty for a wrong answer
Exam: 150 questions · 240 minutes · pass at 450/800 · domain weights 18 / 18 / 12 / 26 / 26.
Generated 04 October 2026. Study aid only — always defer to official ISACA material.