ISCDiscipline section · choose one
Information Systems and Controls
926 real, explained MCQs and 13 server-graded TBS simulations, mapped to the current AICPA Blueprint.
Blueprint content areas
Percent of ISC's scored content each Area represents, per the AICPA Blueprint. Content groups are listed as published in the AICPA Uniform CPA Examination Blueprints, effective January 2026.
I. Information Systems and Data Management35–45%
What the Blueprint covers in this Area
- Information systems
- Data management
II. Security, Confidentiality and Privacy35–45%
What the Blueprint covers in this Area
- Regulations, standards and frameworks
- Security
- Confidentiality and privacy
- Incident response
III. SOC Engagements15–25%
What the Blueprint covers in this Area
- Considerations specific to planning and performing a SOC engagement
- Considerations specific to reporting on a SOC engagement
Skill-level allocation
Remembering & Understanding, Application, and Analysis — this section does not test Evaluation.
Remembering & Understanding55–65%
Application20–30%
Analysis10–20%
Exam structure
60% of score
MCQ testlets
41 + 41 questions across 2 testlets (82 total)
40% of score
TBS testlets
1 + 3 + 2 simulations across 3 testlets (6 total)
Start practicing ISC with real, explained questions and simulations.
See pricing