ISC Study Guide
Information Systems and Controls — IT, Security, Privacy, and SOC
Mock Exam
33 questions · exam conditions · full breakdown
Review Queue
Spaced repetition - wrong answers resurface automatically
Study Modes
Skip to what you need — MCQs only or simulation strategy only.
Section 1
Information Systems and Data Management
35–45% of the ISC exam
Covers IT governance and the IT function, the system development life cycle and change management, IT general and application controls, data management, and business resilience.
Section 2
Security, Confidentiality, and Privacy
35–45% of the ISC exam
Covers information security programs and frameworks, logical and physical access controls, threats and vulnerabilities, data confidentiality and privacy, and incident response.
Section 3
System and Organization Controls (SOC) Engagements
15–25% of the ISC exam
Covers the types of SOC engagements, the trust services criteria, and performing and reporting on SOC 1 and SOC 2 engagements.