StudyToCert

All certifications / CISA / Lessons

ISACA Certified Information Systems Auditor (CISA) 2024 job practice · Domain 1: Information system auditing process

Audit testing and sampling: compliance vs substantive tests, statistical and non-statistical sampling

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

Auditors rarely test every item, so they need to know which kind of test answers their question and how to pick a sample they can defend. The CISA exam tests both ideas regularly, often in the same question: first recognize whether the objective is about a control or about the data, then choose a sampling method that fits.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study CISA for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CISA study plan