thinQmaster
Five questions free, before you decide.
Step 1 · choose a vendor
Built like the exam, not like a flashcard deck. The same question shapes you meet on test day, sat against the published blueprint, with a timed paper at full length.
Question types
389 multiple choice · 63 choose two · 25 drag and drop · 23 put in order
Domains, and how many questions each
A real exam experience
Built like the exam, not like a flashcard deck. The same question shapes you meet on test day, sat against the published blueprint, with a timed paper at full length.
Question types
825 multiple choice
Domains, and how many questions each
A real exam experience
Built like the exam, not like a flashcard deck. The same question shapes you meet on test day, sat against the published blueprint, with a timed paper at full length.
Question types
400 multiple choice · 100 choose two
Domains, and how many questions each
A real exam experience
Built like the exam, not like a flashcard deck. The same question shapes you meet on test day, sat against the published blueprint, with a timed paper at full length.
Question types
400 multiple choice · 100 choose two
Domains, and how many questions each
A real exam experience
Built like the exam, not like a flashcard deck. The same question shapes you meet on test day, sat against the published blueprint, with a timed paper at full length.
Question types
400 multiple choice · 100 choose two
Domains, and how many questions each
A real exam experience
Built like the exam, not like a flashcard deck. The same question shapes you meet on test day, sat against the published blueprint, with a timed paper at full length.
Question types
400 multiple choice · 100 choose two
Domains, and how many questions each
A real exam experience
Built like the exam, not like a flashcard deck. The same question shapes you meet on test day, sat against the published blueprint, with a timed paper at full length.
Question types
172 multiple choice · 53 choose two · 28 drag and drop · 17 put in order
Domains, and how many questions each
A real exam experience
We teach camps, and its thinQmaster titles are being written. Tell us which exam you are booked for and we will put yours first in the queue.
Nothing matches that. Tell us which exam you are booked for and we will tell you where it is in the queue.
In one of our camps? Your practice exams come with the tuition — they are on your study page already.
Starting the engine…
Tell us where you are standing and which way you want to go. We will lay out which certifications to take, in what order, and how long each one is likely to take you — including the ones we do not teach.
Mapping controls to frameworks, gathering evidence, running audits and translating between engineers and regulators.
Pay is the US Bureau of Labor Statistics median for Information Security Analysts, May 2025 — the occupation this job is counted inside, which is usually broader than the job title itself. GRC work is counted within information security analysts. Study times are our own estimates for someone working 8 hours a week, and they are ranges for a reason.
Both ends are US Bureau of Labor Statistics medians, May 2025. Everything between them is a straight line we drew, not data: nobody publishes pay per certification, and real pay moves when you change job, not when you pass an exam.
The baseline security credential, and DoD 8140 approved - which is what unlocks federal and contractor roles.
On the model, this is the step that reaches your $129,000 goal.
Authorisation and risk management, heavily used in federal work.
On the model, this is the step that reaches your $129,000 goal.
Experience requirement. Two years in the relevant domains; associate status is available in the meantime.
Risk, in the language executives and auditors use.
On the model, this is the step that reaches your $129,000 goal.
Experience requirement. Three years in risk management. Pass first, certify later, is permitted.
The audit credential. If you want to be the person reviewing controls, this is it.
On the model, this is the step that reaches your $129,000 goal.
Experience requirement. Five years of audit or control experience, with some substitutions allowed for degrees.
Security management rather than security engineering. Needs five years experience.
On the model, this is the step that reaches your $129,000 goal.
Experience requirement. ISACA wants five years in information security management. You can pass first and certify once the experience is documented.