May 10, 2026

CISA Exam Pacing Strategy: How to Allocate 240 Minutes Across 150 Questions

The candidates who fail the CISA exam usually know the material. They've read the Review Manual, drilled questions, and reviewed their weak domains. What they didn't do is rehearse the four-hour sitting under realistic timing pressure. By question 110, they're behind the clock, rushing through the last 40 questions, and giving away points on questions they would have gotten right with adequate time.

Pacing failure is the most fixable problem on the CISA exam, but only if you treat it as a problem worth solving. This guide walks through the math of CISA timing, the structured pacing strategy that works for most candidates, the mental checkpoints that tell you when you're behind, and the rehearsal habits that turn pacing from a panic experience into a managed process.

The math of CISA timing

The CISA exam is 150 questions in 240 minutes. That's 96 seconds per question on average. On paper, this is not tight — most CISA questions can be answered in 60 to 80 seconds by a prepared candidate. The problem is that the average gets eaten unevenly.

In a typical exam, candidates spend 40 to 60 seconds on roughly 100 of the questions they recognize quickly. They spend two to four minutes each on 30 to 40 questions in the middle range — questions that require careful reading, scenario analysis, or distinguishing between two close answer choices. And they spend four to six minutes each on 10 to 15 hard questions, often re-reading the stem, second-guessing themselves, and getting stuck on options that all look defensible.

The 10 to 15 hard questions are where pacing collapses. Six minutes on a question is double the average. Multiply that across a dozen questions and you've consumed 30 minutes of buffer that you don't have. The result: by question 110 to 120, you're behind by 20 to 30 minutes, and the only way to catch up is to rush the final 30 to 40 questions, where rushing produces wrong answers.

The candidates who pass without time pressure aren't faster on hard questions. They're better at recognizing when a question is going to eat the clock and skipping it before it does.

The structured pacing strategy

The strategy that works for most candidates uses a two-pass approach with a hard rule on first-pass time per question.

First pass: 100 minutes for the first 100 questions, at 60 seconds per question. Move quickly. If you can read the question, identify the qualifier, evaluate the answers, and pick one within 60 seconds, do it and move on. If you can't, flag the question and skip immediately. The flag-and-skip habit is the single most important behavior to rehearse.

The 60-second target is deliberately tight. It forces you to commit to your first instinct on questions where you know the answer. Most candidates lose time not on questions they can't answer, but on questions where they correctly identify the answer within 30 seconds and then spend another two minutes second-guessing themselves. The tight first-pass timer prevents this.

Second pass: 80 minutes for the remaining 50 questions plus all flagged questions. Now you have approximately 96 seconds per question on the harder set, which is enough time for careful work. The flagged questions get re-read with fresh eyes. The remaining unflagged questions in the 100-150 range get worked through at the slightly slower pace they may need.

Final 60 minutes: review and high-stakes second-guessing. With 60 minutes remaining and all questions answered (or flagged with a tentative answer), you have time to revisit the flags you're least confident about. Change answers only when you have a specific reason — a clear logical insight, a definition you misremembered, a qualifier word you missed on first read. Generic second-guessing usually lowers scores; targeted re-evaluation usually raises them.

This strategy works because it spreads the available time across the questions that need it most, rather than trying to give every question equal attention. The exam's difficulty is not evenly distributed; your time allocation shouldn't be either.

Mental checkpoints

The strategy only works if you know whether you're on pace. Two checkpoints catch problems early:

At question 50, you should be at minute 50. If the clock shows minute 60 or later when you finish question 50, you're 10 minutes behind. Accelerate by flagging more aggressively on the next 50 questions. If the clock shows minute 40, you're ahead and can relax slightly on questions that genuinely need the time.

At question 100, you should be at minute 100. This is the more important checkpoint. If you're at minute 120 when you finish question 100, you've burned through your buffer and need to compress the second pass. If you're at minute 90, you have 30 minutes of cushion for the harder second half.

These checkpoints don't require precision. You don't need to look at the clock between questions — that adds anxiety without information. Glance at the clock at the natural breakpoints (after question 50, after question 100, after the first pass) and adjust based on what you see.

The flag-and-skip mindset

The hardest behavior to learn is committing to skip a question before you've solved it. Most candidates resist skipping because it feels like giving up. The instinct is to keep working until the question is done, then move on.

This instinct loses you points on the CISA exam. The five minutes you spend agonizing over a question you were never going to get right is five minutes you don't have for the four questions later in the exam that you would have gotten right with adequate time. The candidate who skips ruthlessly often ends up with a higher score than the candidate who refuses to skip, even when the skipping candidate gets fewer of the hard questions correct.

A useful test: if you've spent 60 seconds on a question and you're still re-reading the stem trying to figure out what it's asking, flag it and move on. If you've eliminated two answer choices but can't decide between the remaining two, mark your best guess, flag it, and move on. The flag preserves your option to revisit; moving on preserves your time budget.

The mindset shift is from "answer every question right" to "manage your time budget so the time goes to questions where it actually changes the answer." On the questions where you can answer in 30 seconds, more time doesn't change the answer. On the questions where you can't decide between two answers, more time often doesn't change the answer either — your best guess is statistically as good as your tortured deliberation. The questions where time actually changes the answer are the ones where you can see the answer is in there and you just need a focused minute to extract it.

Why pacing is harder than it sounds

Reading about pacing strategy is easy. Executing it under exam conditions is hard, because the brain reverts to its default behavior when stressed. Default behavior for most candidates is: read the question carefully, evaluate every answer, double-check your work, then move on. That's a 2-minute-per-question process, which doesn't fit in a 96-second budget.

Three specific habits override the default and make the strategy actually work:

Pre-commit to the 60-second first-pass rule before the exam starts. If you don't decide in advance, you'll default to careful reading and lose the time war by question 30. Tell yourself, before the clock starts, that the first pass is fast and the second pass is careful.

Practice flag-and-skip in untimed conditions first. Most candidates have never flagged a question in their life. The flag button feels like an admission of defeat. Spend a few practice sessions deliberately flagging the first three questions you're not 100% sure on, just to break the psychological resistance to skipping. Once flagging feels normal, it works under timing pressure.

Treat the clock as information, not a threat. The mental checkpoints at question 50 and 100 are diagnostic. If you're behind, the clock is telling you to compress. If you're ahead, the clock is telling you to relax. Either way, the information helps. Candidates who treat the clock as a threat avoid looking at it, which means they don't get the diagnostic information until it's too late.

How to practice pacing

Pacing only works if you've rehearsed it under conditions that match the actual exam. Drilling questions in a question bank doesn't rehearse pacing — there's no four-hour clock, no fixed question count, no penalty for spending six minutes on a hard question.

The minimum useful rehearsal is one full-length, 150-question, 240-minute timed sitting under realistic conditions. No notes. No breaks beyond what Pearson VUE allows during the actual exam. No looking up answers between questions. The point is to find out what your natural pace is, where you drift behind, and which question types eat your clock disproportionately.

After the timed sitting, the diagnostic data matters more than the score. Specifically: how long did you actually take per question? On which questions did you spend more than two minutes? Were those questions you got right or wrong? If you spent four minutes on a question and still got it wrong, that's a question you should have flagged and moved past — the time investment didn't change the outcome.

The pacing diagnostic on cisamock.com is built specifically for this analysis. After each timed mock, you see per-question time, by-domain pacing breakdown, and a list of the questions where time investment was disproportionate to outcome. Candidates who go through this analysis once usually identify three or four behavioral fixes that compound across the exam — not "study harder," but "stop re-reading questions you already understand," "stop second-guessing on definition questions," "flag earlier on scenario questions."

Try a free 50-question demo with pacing analytics →

What to do in the final two weeks

If your exam is 14 days away and you haven't rehearsed full-length timed pacing yet, that's the highest-leverage thing you can do with your remaining time. One full-length mock at day 14, the diagnostic review at day 13, a focused effort to fix the top two pacing behaviors at days 12-7, and a second full-length mock at day 5 to confirm the fixes are sticking.

This sequence beats any amount of additional content review at this stage. By two weeks before the exam, you either know the material or you don't, and additional study won't move the needle much. Pacing is different — it's a behavior, not a knowledge state, and behaviors can change in two weeks if you rehearse them deliberately.

The candidates who pass CISA on their first sitting almost always took at least one full-length timed mock in the final stretch. The candidates who fail on first sitting almost always didn't.