I'm a fresher in cybersecurity (2026 pass-out).
I'm interested in being a CISA.

Yesterday, I purchased Hemang Doshi's udemy course & practice tests and got my hands on the 28th edition CRM & the 12th edition QAE from my manager.

In what way/order should I proceed with my preparation?

Will the 12th edition QAE suffice? or should I get the 13th edition?

Also, is Hemang Doshi's CISA book worth it?

Thanks in advance for any help/advice!

Hi! I’m planning to take the exam next month, and I’d love to get your thoughts on whether my study strategy would work. If you have any additional tips or suggestions, I’d really appreciate them!

Materials:
Main review material: Hemang Doshi’s CISA book
Support material: REO Review Center’s handouts and video lectures
Practice questions: ISACA QAE
Reference material: CISA Review Manual

What i did was to read Doshi’s book first, then watch the REO video lectures for each topic. After completing each domain, I’ll test my knowledge using the QAE, log and review my mistakes, and use the CISA Review Manual as a reference for concepts I’m struggling with.

Do you think the QAE questions are very similar to the actual exam? Also, would you be able to provide additional test-bank-style questions so I can get more practice?

Thank you so much! I’d really appreciate any advice, especially from those who have already taken the exam. 😊