ISACA · Professional Certification · Expert
Certified Information Systems Auditor (CISA)
Crydd Score 70
Demand High
Career Value High
Recognition High
CISA at a glance
- Provider
- ISACA
- Credential type
- Professional Certification
- Exam required
- Yes
- Category
- Security
- Level
- Expert
- Cost
- $575 (ISACA members) / $760 (non-members)
- Difficulty
- Advanced
- Time to earn
- 3–6 months (after meeting experience requirements)
- Validity
- 3 years (maintained with CPE credits)
- Format
- 150 multiple-choice questions, 4 hours; 450 on a 200–800 scale to pass
- Prerequisites
- None to sit the exam; to certify, 5 years in IS/IT audit, control, assurance or security (up to 3 can be waived)
What is CISA?
ISACA's certification for information systems auditors: the audit process, governance and management of IT, systems acquisition, development and implementation, operations and business resilience, and protecting information assets.
Skills it covers
- IS auditing
- Governance
- Risk and controls
- Compliance
Is CISA worth it? The Crydd Verdict
CS 70Choose it if
You work in IT audit, assurance or control testing, or are moving there from accounting, risk or security.
Consider alternatives if
Your focus is running a security programme rather than auditing it: ISACA's CISM. For broad security leadership, ISC2's CISSP.
Why we say so
It is the global standard for IT audit roles and often expected by audit firms and regulators; certifying needs five years of relevant experience.
Market demand
IT auditor and internal audit roles name CISA more than any other credential; demand is steady and rising with regulation.
Where CISA takes you
- Cybersecurity Analyst
- Business Analyst
Career roadmaps show where this certification fits in each path. See the roadmaps.
Related certifications
Curated connections from the catalog — each labelled with how it relates to CISA, so you know why it’s here.
Careers CISA leads to
The professional paths this certification genuinely serves — browse every relevant credential for each.
A sensible order
Where CISA sits on the path — build up, then step on.
Build the foundation first
Earlier steps on the same path
