certification
CISA - Certified Information Systems Auditor
Source-cited RoleMath page about CISA - Certified Information Systems Auditor.
Check if you’re ready ↓Researched by RoleMath Research. Every figure on this page traces to the official source shown next to it.
An experience-gated credential — the experience comes first.
CISA - Certified Information Systems Auditor gates full certification behind substantial work experience (5 years). You can study the domains and even sit the exam, but the honest path is to build that experience first — it is a vendor requirement, not a RoleMath judgment. RoleMath Difficulty methodology
Who this certification is designed for
The vendor’s stated audience, plus an honest fit for your starting point. No pass rates, no guarantees.
Per Isaca: 5 years of professional information-systems auditing, control, or security experience are required for full CISA certification; you can take the exam before meeting the experience requirement. CISA - Certified Information Systems Auditor — official vendor page
Funding to check: exam and prep costs may be reachable through vouchers, WIOA, Workforce Pell, GI Bill, or employer education assistance — eligibility depends on your location, provider, and status. Compare funding options →
Difficulty profile
A cited estimate of what the exam requires, split into two honest lenses — not one number, not a pass rate. RoleMath Difficulty methodology
These are exam-structure lenses, not a pass rate or anything about you.
Cost & upkeep
Exam fee plus what it takes to keep it — the recurring cost most pages hide.
- Exam voucher (US)
- $575 CISA - Certified Information Systems Auditor — official vendor page
- Renewal (3-yr continuing education)
- $45 Isaca
- 3-year self-study cost
- $620
- Recertification terms
- CISA requires 120 CPE credits over a 3-year cycle (minimum 20 per year) and an annual maintenance fee of $45 for ISACA members or $85 for non-members. CISA - Certified Information Systems Auditor — official vendor page
No ROI math here — we never compare cost to a salary. training still needs verification. See the full cost breakdown →
Exam at a glance
How Isaca administers the exam — the logistics only. This is format, not a pass prediction, and it says nothing about how hard the material is for your background.
- Duration
- 4 hours
- Languages
- English Spanish Chinese-Simplified French German Korean Japanese English Spanish Japanese English Spanish Chinese- Simplified Japanese French German English Chinese-Simplified English
Skills measured
The official objective domains and their exam weight — titles & weights only, straight from the vendor’s exam objectives. CISA - Certified Information Systems Auditor — official vendor page
Prerequisites
What's required vs merely recommended — stated plainly.
- Hard requirement
- 5 years CISA - Certified Information Systems Auditor — official vendor page
- Experience for full certification
- 5 yearsNone to sit the exam — you can take the exam before meeting the experience requirement.
What this proves — and how Isaca says to prepare
Isaca’s own framing of who earns it and what it signals, plus their free official study material. Quoted and cited — never dressed up as a job guarantee.
- Who the vendor built it for
- Best fit for professionals who audit, monitor, and assess IT and business systems, validating IT-audit process, governance, and information-asset protection skills.
Job titles the mapped roles report
Reported job titles from the U.S. Department of Labor’s O*NET for the occupations CISA - Certified Information Systems Auditormaps to — the language of the market, not a placement or hiring claim. Titles vary by employer, seniority, and location.
- Information Security Officer
- Information Security Specialist
- Information Systems Security Analyst
- Information Systems Security Officer (ISSO)
- Information Technology Security Analyst (IT Security Analyst)
- Network Security Analyst
- Security Analyst
- Systems Analyst
Source: O*NET OnLine reported job titles for the mapped SOC occupations.
Pay context for the roles this maps to
Occupation-level government data for a related role — not a salary this certification pays you.
$75,090 to $199,850 · Cybersecurity Analyst (SOC 15-1212) BLS OEWS — Cybersecurity Analyst (15-1212), national
This is what the occupation pays across the whole economy — set by the job, your experience, and location, not by holding this certification. Your actual pay will differ. See the full role page →
Credential credit map
What this counts toward
RoleMath shows cited equivalency, baseline, stacking, and renewal signals as planning context. These are not hiring guarantees or universal transfer credits.
DoD 8140/8570 approved baseline
Listed as an approved baseline certification for this DoD workforce level.
Confirm current DoD status at the official DoD Cyber Exchange before using this for a contract, billet, or compliance decision.
- DoD 8140 IAM Level IIVerify at official source
Candidate DoD 8570/8140 approved baseline certification mapping; verify against DoD Cyber Exchange table during QA. DoD 8570.01-M baseline certs are transitioning under DoDM 8140.03.
Official source - DoD 8140 IAM Level IIIVerify at official source
Candidate DoD 8570/8140 approved baseline certification mapping; verify against DoD Cyber Exchange table during QA. DoD 8570.01-M baseline certs are transitioning under DoDM 8140.03.
Official source - DoD 8140 CSSP AuditorVerify at official source
Candidate DoD 8570/8140 approved baseline certification mapping; verify against DoD Cyber Exchange table during QA. DoD 8570.01-M baseline certs are transitioning under DoDM 8140.03.
Official source
Equivalency, credit, and baseline mappings come from official/authoritative sources and are shown as planning context only. ACE recommendations are accepted at each institution's discretion; DoD baseline status must be confirmed against the current official DoD Cyber Exchange table; 'comparable scope' means similar role positioning, NOT an equivalence or substitution. No certification guarantees a job, salary, or outcome.
Every figure on this page, sourced
The claims above trace to these records — the source, and when it was last checked. If a figure has no row here, we did not publish it.
| ID | Supports | Source | Checked |
|---|---|---|---|
| SCHEMA-CIT-1 | Schema citation | ISACA Certifications | Logged in source packet |
| SCHEMA-CIT-2 | Schema citation | Official ISACA objective-domain source | Logged in source packet |
| SCHEMA-CIT-3 | Schema citation | Official Html And Pdf | Logged in source packet |
| SCHEMA-CIT-4 | Schema citation | CISA maintenance requirements page | Logged in source packet |
| SCHEMA-CIT-5 | Schema citation | CISA exam candidate guide | Logged in source packet |
| SCHEMA-CIT-6 | Schema citation | ISACA Continuing Professional Education Policy > | Logged in source packet |
| SCHEMA-CIT-7 | Schema citation | ISACA exam day rules guide | Logged in source packet |
| SCHEMA-CIT-8 | Schema citation | ISACA exam scheduling guide | Logged in source packet |
| SCHEMA-CIT-9 | Schema citation | CISA official source page | Logged in source packet |
Ready to see how this fits your background?
Find out if CISA - Certified Information Systems Auditor fits your background.