ISC study guide
Information Systems and Controls, IT, Security, Privacy, and SOC
The Pattern Lab
Every ISC question is one of 13 patterns.
Mock exam
33 questions · exam conditions · full breakdown
Review queue
Spaced repetition, wrong answers resurface automatically
The Pattern Lab
NewEvery ISC question is one of a dozen-odd recurring patterns. Learn to spot each one, run its playbook, and clear them all.
Study modes
Skip to what you need, MCQs only or simulation strategy only.
Section 1
Information Systems and Data Management
35–45% of the ISC exam
Covers IT governance and the IT function, the system development life cycle and change management, IT general and application controls, data management, and business resilience.
Section 2
Security, Confidentiality, and Privacy
35–45% of the ISC exam
Covers information security programs and frameworks, logical and physical access controls, threats and vulnerabilities, data confidentiality and privacy, and incident response.
Section 3
System and Organization Controls (SOC) Engagements
15–25% of the ISC exam
Covers the types of SOC engagements, the trust services criteria, and performing and reporting on SOC 1 and SOC 2 engagements.