ISC: How This Section Fits CPA Evolution

Core plus one Discipline

The Uniform CPA Exam uses three Core sections: Auditing and Attestation (AUD), Financial Accounting and Reporting (FAR), and Taxation and Regulation (REG). Candidates also choose one Discipline section. The current choices are Business Analysis and Reporting (BAR), Information Systems and Controls (ISC), and Tax Compliance and Planning (TCP).

ISC is one alternative, not an additional section taken alongside BAR and TCP. The structure lets candidates demonstrate deeper knowledge in one area after completing the shared Core. Jurisdiction rules determine eligibility, exam credit periods and eventual licensure.

What ISC emphasizes

ISC assesses information systems and data management, security, confidentiality and privacy, and considerations for SOC engagements. The 2026 blueprint gives 35 to 45 percent to each of the first two Areas and 15 to 25 percent to SOC considerations. Tasks include analyzing systems and data, assessing safeguards and interpreting report evidence.

The section is four hours, with 82 MCQs and 6 TBSs. AICPA weights MCQ performance at 60 percent and simulations at 40 percent. Candidates therefore need both a broad grasp of information systems concepts and the ability to apply them to evidence and cases.

How the Discipline choice affects your plan

Your choice determines which specialized blueprint you prepare for. It does not replace a Core section, waive education requirements or award a different type of license. Passing the required exam sections is one part of becoming a CPA; candidates must meet their jurisdiction’s other conditions.

Disciplines have a limited scheduling window. NASBA schedules them during the first month of each calendar quarter. Align study with the target month, NTS validity and seat availability. If your preparation needs more time, the next feasible sitting may be a later quarter.

ISC compared with BAR and TCP

ISC centers on information systems, security and SOC work. BAR emphasizes business analysis, technical accounting and reporting, and state and local governments. TCP emphasizes tax compliance and planning. Compare detailed blueprints rather than relying on labels such as technology, accounting or tax.

Pass rates are not a reliable personal difficulty ranking. AICPA reported an ISC cumulative pass rate of 67.45 percent through Q2 2026. This describes a group of candidates and cannot predict your result. Candidate backgrounds and reasons for choosing each Discipline differ.

A disciplined way to decide

Read each official blueprint and classify topics as familiar, partly familiar or new. Try representative study material if available. Notice what interests you and what kind of work you can sustain over several weeks. A job title may suggest useful context, but it does not prove that you know the full blueprint.

Next, consider format and schedule. ISC has more MCQs than the other Disciplines but still includes six TBSs. Check whether you are prepared to practise cases and interpret system evidence. Estimate realistic weekly hours and compare the result with a quarterly window.

Finally, check your jurisdiction’s application process and licensure requirements. Exam structure is common, but boards determine education evaluations and licensing details. Keep the Discipline choice distinct from the question of whether you qualify to become licensed.

Core exam and professional license are separate

The Core-plus-Discipline model describes the exam, not a separate license category. A candidate who selects ISC still completes AUD, FAR and REG. After passing the exam requirements, the candidate must meet the licensing jurisdiction’s education, experience, ethics and application rules. Those requirements should be checked with the board independently.

ISC may be a useful area of study for candidates interested in assurance and advisory work involving systems, data and service organizations. It does not qualify someone for a specific technology role or guarantee client work. Professional responsibilities depend on competence, experience and applicable standards.

The Discipline is a study choice, not a job assignment

ISC can demonstrate study in information systems and controls, but it does not require a CPA to work in IT audit or prevent work in other areas. Career responsibilities depend on employer needs, competence and experience. Treat the Discipline as part of the exam path rather than a guarantee of a particular role.

Candidates also should not choose ISC because they believe it replaces a Core section or changes license eligibility. It is one of three Discipline alternatives, and the licensing board applies its own requirements after the exam.

For planning, account for the quarterly Discipline calendar and the Core sequence. A candidate may have a preferred sitting order based on study needs, but should compare the NTS, credit rules and state deadlines with the plan before applying.

How the common Core complements ISC

The Core sections remain part of every CPA candidate’s exam path. AUD addresses audit and attestation knowledge, FAR financial reporting, and REG taxation and regulation. ISC adds depth in systems and controls. It does not replace foundational knowledge from the Core or remove the need to satisfy jurisdiction rules.

The Core-plus-Discipline design should not be interpreted as a choice among three kinds of CPA license. It is an examination structure. A person who passes ISC and meets the relevant state requirements receives the same category of CPA license as a person who selected BAR or TCP.

Candidates should check whether their preferred Discipline fits with their order of Core sections and deadlines. A strong study plan can still be affected by credit expiration or limited scheduling. Review the board and NASBA calendar as part of the wider sequence.

Understand the exam pathway in sequence

Candidates typically plan the Discipline alongside the three Core sections, but the best sequence depends on their preparation and jurisdiction deadlines. Review the order of applications, NTS validity and exam-credit rules as part of the plan. Passing one section does not eliminate the need to monitor the remaining requirements.

The common Core provides shared knowledge, while the Discipline adds focused depth. That design allows candidates to choose among reporting and analysis, systems and controls, or tax compliance and planning without creating separate professional credentials.

The Discipline and public pass-rate data

AICPA reported an ISC cumulative pass rate of 67.45 percent through Q2 2026. That is a cohort statistic and should not be used as a claim that the Discipline is easier or that a particular candidate is likely to pass. Read the blueprint and use fresh practice to assess the fit.

All three Disciplines lead through the same general CPA Exam pathway. Choose the one whose content you can prepare for responsibly and verify any state-specific application requirements before making a final schedule.

Check the jurisdiction before planning licensure

The exam structure is national, but states control details such as education evaluation, experience and certification application. Candidates should check the licensing board even after exam approval. A change in residence or intended state can change which records are needed.

Keep a calendar for Core credits and the Discipline sitting. NASBA and the board publish candidate instructions that may update over time. Use the version relevant to the sitting rather than a saved older checklist.

The central distinction is straightforward: ISC is an exam section; the CPA credential is issued under jurisdiction law. The Discipline choice changes tested content while the state application determines whether all license conditions have been met.

How to prepare for the Discipline sitting

Build a study plan from the ISC Areas rather than a broad “technology” label. Systems and data, security and privacy, and SOC each require different knowledge. Use both MCQs and simulations; the 60/40 weighting means candidates should not leave TBSs until the end.

Schedule the exam only when the application, NTS and your preparation window align. The first-month quarterly schedule makes timing important. If a delay moves the sitting, update the plan and verify the authorization remains valid.

A candidate can prepare for ISC while completing Core sections, but the order should fit the jurisdiction credit rules and personal study calendar. There is no universal sequence that works for everyone.

The Discipline is not a guarantee

Completing ISC does not by itself issue a license or establish competence in every systems engagement. Candidates continue to follow professional standards, gain experience and meet board requirements.

Choose the Discipline by its blueprint

The right choice comes from comparing the content and the work required to learn it. ISC is a specialized exam section within a common CPA path; its systems emphasis does not alter the licensing jurisdiction or replace the Core.

A closer application

ISC is the Discipline option for candidates interested in information systems, cybersecurity, technology risks, and controls. It follows the three Core sections; it does not replace the common accounting foundation or issue a separate technology license. BAR, ISC, and TCP are alternative ways to demonstrate deeper knowledge in a chosen area within the CPA exam structure. FAR and the other Core sections still matter to an ISC candidate because systems and controls support reliable financial reporting. A control scenario may involve access to accounting data or changes to a financial application. The task, however, asks for control reasoning, not a full audit opinion. Keep the user, system, risk, and control evidence clear. A candidate with IT experience may recognize terminology quickly but should still study the exam’s accounting and assurance context. Consider ISC when you are curious about how technology processes support an organization and are willing to learn control evaluation. Choose it based on the blueprint and your interests, not because a current job title seems to match. The CPA license remains subject to the applicable board’s full requirements.