DISA 4.0: DISA 3.0 to 4.0 Upgrade, Fees & Transition Details

DISA 4.0:The Digital Accounting and Assurance Board (DAAB) of the Institute of Chartered Accountants of India (ICAI) has announced the upgrading of the Post Qualification Course on Information Systems Audit from DISA 3.0 to DISA 4.0. The revamped DISA 4.0 ICAI course focuses on building practical audit skills, cybersecurity awareness, and risk management capabilities for Chartered Accountants. As new batches under the older version discontinue, existing DISA 3.0 candidates must understand the DISA 3.0 transition to the 4.0 framework. 

What is DISA 4.0 ICAI?

The DISA 4.0 course is an upgraded Post Qualification Course (PQC) designed by ICAI to prepare members for complex digital environments. In response to rapid technology changes, cloud computing, and cybersecurity threats, ICAI revised the course structure to focus on hands-on practical application.

The revised ICAI DISA 4.0 curriculum moves beyond basic IT controls to emphasise real-world audit scenarios, data privacy compliance, and system security assessments. It provides members in practice and industry with practical tools to conduct IT risk assessments and internal system audits effectively. Click the button below to download the official notification:

Upgradation of DISA 3.0 to DISA 4.0 ICAI Notification PDF

ICAI DISA 4.0 & 3.0 Overview 

DISA 4.0 and 3.0 details have been discussed below:

DISA 4.0 Course Structure & Learning Modules

The DISA 4.0 course structure uses a blended learning model combining self-paced digital modules, interactive online sessions, and physical training:

• Self-paced e-Learning (15 Hours): Covers foundational concepts of information technology, system controls, and security standards.

• Live Immersion Sessions (2 Days / 12 Hours): Interactive online classes focused on practical concepts, tools, and technical case studies.

• Physical Practical Training (8 Days): Classroom training focusing on auditing software, system log analysis, and simulated audit scenarios.

Key Areas Covered Under DISA 4.0 Syllabus

The expanded DISA 4.0 syllabus equips CAs to handle modern technology risks and regulatory demands:

• Information Systems Audit & Governance: IT governance frameworks, IT strategy, and alignment with business objectives.

• Cybersecurity Audit & Risk Management: Incident response planning, network security controls, and enterprise risk management.

• Application Controls & Identity Access: Evaluating automated controls in modern enterprise resource planning (ERP) systems and identity management setups.

• Third-Party Risk & Operations: Assessing vendor IT risks, outsourcing controls, and operational continuity strategies.

• Business Resilience & Compliance: Data protection laws, Disaster Recovery Planning (DRP), and Business Continuity Planning (BCP).

DISA 4.0 Eligibility & Registration Process

DISA 4.0 Eligibility

• The course is open exclusively to active members of the Institute of Chartered Accountants of India (ICAI).

• Both practising CAs and CAs working in industry who hold a valid ICAI membership number can apply.

DISA 4.0 Registration Steps

1. Visit the official ICAI Digital Learning Hub (learning.icai.org).

2. Log in using your registered SSP (Self Service Portal) credentials.

3. Select DISA 4.0 Registration from the available Post Qualification Courses.

4. Pick your preferred batch schedule for physical practical training.

5. Pay the prescribed DISA 4.0 fees online to complete your enrollment.

DISA 3.0 to 4.0 Upgrade & Transition Framework

ICAI has introduced a clear DISA 4.0 transition framework to support candidates currently enrolled in DISA 3.0. The migration paths depend on your current stage in the program:

Path 1: Fresh Candidates

• Members joining the program for the first time will enrol directly in DISA 4.0.

• Complete 15 hours of e-learning, 12 hours of live immersion, and 8 days of physical practical training.

Path 2: DISA 3.0 Candidates Who Cleared the Eligibility Test (ET)

• Candidates who passed the DISA 3.0 Eligibility Test but have not cleared the final Assessment Test (AT) receive a transition window of 2 years or 6 attempts.

• They can finish the remaining Assessment Test attempts under the DISA 3.0 framework without paying an additional fee.

• After the 2-year window expires, candidates must transition to DISA 4.0.

Path 3: DISA 3.0 Candidates with Classes Completed but ET/AT Pending

Candidates who finished DISA 3.0 classroom training but have not cleared the Eligibility Test can select one of two routes:

• Option A (Migrate to DISA 4.0): Attend an 8-day practical bridge class, pay a DISA 4.0 upgrade fee of ₹10,000, and take the ET and AT under the DISA 4.0 syllabus.

• Option B (Complete DISA 3.0): Continue under the DISA 3.0 track and clear the ET and AT within two years at no extra charge.

Path 4: Members Already Qualified Under DISA 3.0

• Chartered Accountants who already hold the DISA 3.0 qualification can take the optional DISA+ Refresher Course.

• This course carries a fee of ₹20,000 and helps qualified members update their skills with modern cybersecurity and practical IT audit tools.

 DISA 4.0 Fee Structure 

DISA 4.0 Fee structure is given below: