The ISC Guide
Everything you need to know before sitting for CPA Information Systems and Controls (ISC)
Why ISC matters in 2026
CPA Information Systems and Controls (ISC) is one of the most recognized credentials issued by AICPA, and 2026 hiring data continues to show ISC on job postings as either required or strongly preferred for the roles it targets. The certification validates that you can apply real working knowledge, not just recall facts, across 3 distinct exam domains, with the largest weight on Information Systems and Data Management. For candidates competing in the AICPA ecosystem, ISC is a clear signal to a hiring manager that you have invested in measurable, third-party-verified competence.
Who should take ISC
ISC is most useful for professionals working in or moving toward the AICPA ecosystem. In short: Discipline section of the Uniform CPA Examination, IT audit, security, and SOC engagements. If you are early in your career, ISC is one of the fastest credentials to add to a résumé that recruiters actively screen for. If you are mid-career, it formalizes the skills you already use day-to-day and unlocks roles that gate on it. If you are switching tracks, it gives you a structured curriculum that tells you exactly what to study, in what order, weighted by what the real exam tests.
Exam structure and difficulty
The CPA Information Systems and Controls (ISC) exam is organized into 3 domains, each weighted by the official AICPA exam guide. The heaviest weighting is Information Systems and Data Management at 37% of the exam, so that is where you should spend the most preparation time. The lightest is Considerations for System and Organization Controls (SOC) Engagements at 26%, meaning you can dedicate roughly proportional review time without over-investing.
Format details: AICPA Uniform CPA Examination · Discipline section · 4 hours · 82 MCQs + 6 TBSs · 60% MCQ / 40% TBS scoring (only section not 50/50) · Skill mix: 55-65% Remembering & Understanding, 20-30% Application, 10-20% Analysis · Most aligned with IT audit, cybersecurity, and SOC attestation career tracks · Effective January 2025 blueprint. Following the domain weights is the single biggest leverage point candidates miss, because many over-study lower-weighted material that feels comfortable.
How to prepare
A practical four-step plan for ISC:
- Read the official AICPA exam guide for ISC and write down every sub-objective. This becomes your study checklist.
- Use the domain practice quizzes on this page in weight order (heaviest first). Aim for 80% on each domain before moving on.
- When you miss a question, read the explanation for every wrong answer, because that contrastive learning is where understanding compounds.
- Once every domain is at 80%+, take the Mix Quiz repeatedly to simulate real exam conditions across all topics.
Career outcomes and salary
Holders of ISC in the US currently see compensation in the range of $68k to $165k per year, with median around $98k. CPA ISC is a Discipline section; salary applies to the full CPA credential Salary varies by region, employer size, and complementary skills, but the ISC credential consistently lifts the floor of what you can negotiate against. Source: BLS, ZipRecruiter, 2026.
Common pitfalls
The three traps that kill ISC candidates: (1) over-memorizing acronyms instead of practicing the application of concepts in scenarios, when the exam is scenario-driven, not a vocab quiz. (2) Skipping the heaviest-weighted domain because it feels less interesting, which can fail the whole exam by neglecting Information Systems and Data Management. (3) Not timing practice sessions, when the exam has a real clock and pacing is its own skill. Build timing into your last two weeks of prep.
ISC questions, answered
What is the passing score for ISC?
Like every CPA Exam section, you need 75 on AICPA's 0-99 scale.
How much does the ISC exam cost?
CPA Exam section fees are set by your state board, typically $250 to $350 per section, plus a separate application/registration fee.
Why is ISC scored differently from the other sections?
ISC is the only CPA Exam section weighted 60% MCQ / 40% TBS instead of the usual 50/50 split, and it leans more heavily on Remembering & Understanding (55-65%) than the other sections, since it covers IT governance, security, and SOC engagement concepts more than deep application scenarios.
Who should choose ISC as their Discipline section?
Candidates heading toward IT audit, cybersecurity risk assessment, SOC 1/SOC 2 attestation engagements, or data governance work. You only need to pass 1 of the 3 Discipline sections (BAR, ISC, TCP), and your choice does not limit what you can practice as a CPA.
How long do I have to pass all 4 CPA sections?
A rolling 30-month window from the date you pass your first section, or your earliest passing score expires and you retake that section.
Is this ISC practice test free?
Yes. Every ISC practice question on QuizBuffet is free, with instant feedback and an explanation for each answer, no signup required.