The exam is the down payment; training and renewal are the rest of the cost. Below is what each piece actually costs, every figure sourced and dated. The exam, the training, and the renewal are separate — a course is not the certification.
See the certification itself: CISA - Certified Information Systems Auditor.
What it costs
| Cost | Amount | As of | Source |
|---|---|---|---|
| Exam fee (one-time) | $760 | 2026-06-09 | official |
| Training (optional; across 1 providers) | $3,850 | 2026-06-14 | provider |
| Renewal / maintenance | $85 per year (non-member annual maintenance fee; ISACA members pay US$45 a year) | 2026-06-09 | official |
Keeping it current
This credential is valid for 3 years. Renewal model: ISACA page states holders must report at least 120 CPE hours during a three-year reporting period, with at least 20 CPE hours per year..
A transparent 3-year estimate
Minimum 3-year ownership cost ≈ $1,015 — the exam ($760) plus renewal $255 over 3 years. This is a cost horizon, not a study-duration estimate; optional preparation materials and retakes are excluded.
With a paid course ≈ $4,865 — add the lowest published training ($3,850) to the exam and renewal.
These are illustrations from cited components, not quotes; they exclude retakes, study materials, and your time, and use the lowest published (commercial, non-discounted) training price. Your cost will differ.
Many certification vendors publish free self-paced training (for example AWS Skill Builder and Microsoft Learn), so the training line can be $0 if you self-study — see the training-options pages and the training providers hub.