CPA ISC Practice Exam
Information Systems and Controls is a Discipline section that builds on AUD: 82 multiple-choice questions and 6 task-based simulations in four hours. It is the only section where multiple-choice questions count for 60% of the score.
82 multiple-choice questions and 6 task-based simulations in 4 hours and 5 testlets, scored by Blueprint area with a reason for every answer.
Or start with a free 10-question drill- 94 original ISC questions with a reason for every option
- 6 task-based simulations with exhibits and part-by-part scoring
- 8 free drills: every Blueprint topic, a mixed set and a simulation set
Which section appears in a SOC 2 Type 2 report but not in a Type 1 report?
CPA ISC exam format
Information Systems and Controls (ISC), a Discipline section; you choose one of BAR, ISC or TCP, under the AICPA CPA Exam Blueprints effective January 1, 2027.
- Format
- 82 multiple-choice questions and 6 task-based simulations in 5 testlets (41 MCQ, 41 MCQ, then 1, 3 and 2 TBS)
- Time
- 4 hours
- Score weighting
- Multiple-choice 60%, task-based simulations 40%
- Content areas
- I Information Systems and Data Management 35–45% · II Security, Confidentiality and Privacy 35–45% · III SOC Engagements 15–25%
- Passing score
- A scaled score of 75 on a 0–99 scale. The scaled score is not a percentage of questions answered correctly
- When you can test
- Discipline sections test only in set windows: January 1–31 and April 1–30, 2027, then July 12–August 12 and October 1–31, 2027 on the new platform
- Fee
- US$268.59 per section exam fee in NASBA-served jurisdictions (as of July 4, 2026), plus your board’s application or registration fees
What’s on CPA ISC
The Blueprint content areas, split into the topics you study. Our full mock draws each area’s multiple-choice questions at the middle of its range. Every topic has a study guide and a free ten-question drill.
| Topic | Blueprint | Guide and drill |
|---|---|---|
| Area I. Information Systems and Data Management | 35–45% of the section | |
| Information systems, IT general controls and change management | I.A | 10-question drill |
| Data management, databases and data analytics | I.B | 10-question drill |
| Area II. Security, Confidentiality and Privacy | 35–45% of the section | |
| Security controls and threats | II.B | 10-question drill |
| Frameworks, confidentiality, privacy and incident response | II.A, II.C, II.D | 10-question drill |
| Area III. Considerations for System and Organization Controls (SOC) Engagements | 15–25% of the section | |
| Planning and performing SOC engagements | III.A | 10-question drill |
| SOC reports and opinions | III.B | 10-question drill |
What ISC tests
- Information systems: IT infrastructure and cloud, IT general controls, change management, business resilience, and data management including SQL and analytics.
- Security, confidentiality and privacy: frameworks (NIST CSF, COBIT, COSO), threats and controls, privacy laws and incident response.
- SOC engagements: planning, performing and reporting on SOC 1, SOC 2 and related engagements, and how user auditors rely on them.
- For 2027, the AICPA narrowed the blockchain concepts eligible for testing.
Take a full ISC mock under the real clock
82 multiple-choice questions and 6 task-based simulations in 4 hours and 5 testlets, scored by Blueprint area with a reason for every answer.
Or start with a free 10-question drillCommon questions
How many questions are on CPA ISC?
82 multiple-choice questions and 6 task-based simulations in five testlets, with four hours of testing time.
How is ISC scored?
Multiple-choice questions count for 60% and simulations for 40%, unlike the other sections’ 50/50 split. Scores run from 0 to 99 and 75 passes.
When can I take ISC?
Discipline sections test only in set windows: January 1–31 and April 1–30, 2027, then July 12–August 12 and October 1–31, 2027 on the new platform.
Who should choose ISC?
Candidates heading into IT audit, risk advisory, SOC reporting or systems roles, and those who want to build on AUD content.
Ready for exam day?
82 multiple-choice questions and 6 task-based simulations in 4 hours and 5 testlets, scored by Blueprint area with a reason for every answer.
Or start with a free 10-question drillAll six CPA Exam sections
Pass the three Core sections and one Discipline section. One CPA pass covers every full mock and unlimited drills for all six. CPA Exam overview
Core: everyone takes all three
Exam format, weights, fees and testing windows checked November 2026: AICPA: Learn what is tested on the CPA Exam (Blueprints effective January 1, 2027) · AICPA: CPA Exam score release and testing windows · NASBA: CPA Exam FAQ · Virginia Board of Accountancy: CPA Exam fees.
Original independent practice questions and simulations written to the AICPA CPA Exam Blueprints. Not affiliated with or endorsed by the AICPA or NASBA. Uniform CPA Examination is a registered trademark of the AICPA.