What the vendors actually require

How hard is each IT certification?

The honest answer is that “hard” depends on what you already know — and the most concrete thing published about that is what the vendor itself asks for. So RoleMath groups the 152 certifications it holds a vendor experience statement for, each one linked to the vendor page it came from and dated with the day we read it. Most entries are the vendor’s own wording; where a vendor page states a requirement without phrasing it as one — a page that simply lists no prerequisite, for instance — the entry is RoleMath’s one-line summary of that page rather than a quotation, and the link is there so you can check it. There is no score here, because a score would be our opinion wearing a number’s clothes.

Entry — nothing required, or under a year suggested (33)

The vendor asks for no experience and publishes the credential in a foundational tier, or it suggests less than a year. Both signals have to agree before a credential lands here, because "no prerequisite" on its own only means registration is open — which is why hands-on exams like CKA and RHCSA are not in this group. The row below shows you the experience evidence; the tier check runs against the vendor's own published tier for that credential, which this table does not print. Where a credential states no prerequisite AND its vendor tier is not a foundational one, it is left out of this group rather than placed in it.

CertificationVendorWhat we found on the vendor’s pageRead on
Associate Google Workspace AdministratorGoogle Cloud6 months of Google Workspace Super Admin experience in a real or test environment. Hands-on experience with Business Plus edition and knowledge of Enterprise Edition features and functionality. Certification renewal: Candidates may renew their certification source2026-06-08
AWS Certified AI PractitionerAmazon Web ServicesNo formal prerequisite stated. source2026-06-26
AWS Certified Cloud PractitionerAmazon Web ServicesUp to 6 months of exposure to AWS Cloud — explicitly not required; the exam targets candidates new to cloud who may not have an IT background. source2026-06-14
CC - Certified in CybersecurityISC2No prerequisite stated. source2026-06-26
Certified Associate in Project ManagementProject Management InstituteA secondary diploma (high-school or global equivalent) plus 23 contact hours of formal project-management education — no work experience and no prior certification required. source2026-06-14
Certified Cybersecurity Technician (CCT)EC-CouncilNo experience prerequisite stated on the official eligibility page. Candidate purchases the listed CCT exam voucher. source
Second route: No training-or-experience gate is stated on the official eligibility page.
2026-06-26
Certified System AdministratorServiceNowNo required experience or prerequisite stated. source2026-06-26
Cisco Certified Support Technician CybersecurityCiscoNo formal prerequisites. source2026-06-12
Cisco Certified Support Technician IT SupportCiscoNo formal prerequisites; candidates should understand the exam topics before taking it. source2026-07-04
Cisco Certified Support Technician NetworkingCiscoNo formal prerequisites. source2026-06-12
Cloud Digital LeaderGoogle CloudPrerequisites: None. source2026-06-26
Cloud FundamentalsISACANo prerequisite stated on page. source2026-06-26
CompTIA Tech+CompTIANo prerequisite stated on the official page; vendor background is recommended, not required. source2026-06-19
Fortinet NSE 4 - FortiOS 7.6 AdministratorFortinetNo required experience or prerequisite stated. 1–2 years of experience with networking; 0–1 year of experience with network security; Minimum of 6 months of hands-on experience with FortiGate source2026-06-26
Generative AI LeaderGoogle CloudNo prerequisite stated. source2026-06-26
GIAC Foundational Cybersecurity Technologies (GFACT)GIAC (SANS)No formal experience requirement found on the official GIAC certification page; GIAC certification attempts are activated after application approval and purchase. source2026-06-26
GIAC Information Security Fundamentals (GISF)GIAC (SANS)No formal experience requirement found on the official GIAC certification page; GIAC certification attempts are activated after application approval and purchase. source2026-06-26
IT Audit FundamentalsISACANo prerequisite stated on page. source2026-06-26
IT Risk FundamentalsISACANo prerequisite stated on page. source2026-06-26
ITIL 4 FoundationPeopleCertNo experience requirement stated. source2026-07-29
Microsoft Azure FundamentalsMicrosoftNone source2026-07-20
Microsoft Certified: Azure Data FundamentalsMicrosoftNo formal prerequisites; open registration. source2026-07-04
Microsoft Certified: Power Platform FundamentalsMicrosoftNo experience requirement stated. source2026-06-26
Microsoft Certified: Security, Compliance, and Identity FundamentalsMicrosoftNo formal prerequisites; open registration. source2026-07-04
Palo Alto Networks Certified Cybersecurity ApprenticePalo Alto NetworksNo formal prerequisite stated on the vendor page. source2026-07-30
Salesforce Certified Platform FoundationsSalesforceNo required experience or prerequisite stated. Designed for people with fundamental awareness of Salesforce as an integrated CRM platform and up to 6 months of Salesforce user experience. source2026-06-26
SnowPro Core CertificationSnowflake6 or more months of experience using Snowflake source2026-06-26
Splunk Core Certified Power UserSplunkNo required experience or prerequisite stated. Entry-level baseline for users of Splunk Enterprise and Splunk Cloud; blueprint says no prerequisite exams. source2026-06-26
Splunk Core Certified UserSplunkNo required experience or prerequisite stated. Optional entry point for candidates with little to no Splunk experience or prior knowledge; no prerequisite exams or courses. source2026-06-26
Splunk O11y Cloud Certified Metrics UserSplunkNo required experience or prerequisite stated. Foundational exam for Splunk Observability Cloud users; blueprint says there are no prerequisite exams. source2026-06-26
VMware Certified Professional - VMware Avi Load Balancer AdministratorVMware (Broadcom)at least 3 months of hands-on product experience is recommended; the minimally qualified candidate has at least 3 months’ hands-on experience with VMware Avi Load Balancer. source2026-06-26
VMware Telco Cloud NFV SkillsVMware (Broadcom)The minimally qualified candidate has 3 to 6 months hands-on experience with VMware Telco Cloud Infrastructure Cloud Director Edition. source2026-06-26
VMware Telco Cloud Platform Specialist SkillsVMware (Broadcom)The minimally qualified candidate has 3 to 6 months hands-on experience with VMware Telco Cloud Automation. source2026-06-26

Core — about one to two years suggested (62)

The vendor points at roughly one to two years of hands-on work, either as a duration or as a description of who the exam is written for. This is where the familiar "entry-level" certifications actually sit: CompTIA suggests about 12 months of support experience for A+, and roughly two years for Security+.

CertificationVendorWhat we found on the vendor’s pageRead on
AWS Certified CloudOps Engineer - AssociateAmazon Web ServicesIndividuals with about one year of experience deploying, managing, and operating workloads on AWS; FAQ says one year with deployment, management, networking, and security on AWS. source2026-06-26
AWS Certified Data Engineer - AssociateAmazon Web ServicesIdeal candidate has the equivalent of 2-3 years of experience in data engineering or data architecture and a minimum of 1-2 years of hands-on experience with AWS services. source2026-06-26
AWS Certified Developer - AssociateAmazon Web ServicesOne or more years of prior hands-on experience developing and maintaining applications by using AWS services is recommended. source2026-06-26
AWS Certified DevOps Engineer - ProfessionalAmazon Web ServicesTwo or more years of experience provisioning, operating, and managing AWS environments is recommended for the target candidate. source2026-06-26
AWS Certified Generative AI Developer - ProfessionalAmazon Web ServicesTarget candidate should have two or more years building production-grade applications on AWS or with open-source technologies plus one year hands-on implementing generative AI solutions. source2026-06-26
AWS Certified Machine Learning Engineer - AssociateAmazon Web ServicesAt least one year of experience using Amazon SageMaker and other ML engineering AWS services; FAQ also states at least one year in ML engineering or related field and one year hands-on with AWS services. source2026-06-26
AWS Certified Solutions Architect - ProfessionalAmazon Web ServicesRecommended experience is two or more years using AWS services to design and implement cloud solutions. source2026-06-26
AWS Certified Solutions Architect AssociateAmazon Web ServicesAt least 1 year of hands-on experience designing AWS cloud solutions (the vendor's recommendation, not a requirement); candidates with 1–3 years of IT experience have earned it. source2026-06-14
Cisco CCNA AutomationCiscoCisco recommends roughly one or more years of experience implementing and administering Cisco solutions (advisory, not required). source2026-06-14
Cisco CCNA CybersecurityCiscoCisco recommends roughly one or more years of experience implementing and administering Cisco solutions (advisory, not required). source2026-06-14
Cisco Certified Network AssociateCiscoCisco recommends roughly one or more years of experience implementing and administering Cisco solutions (advisory, not required). source2026-06-14
CompTIA A+CompTIACompTIA recommends about 12 months of hands-on experience in an IT support role (a recommendation, not a requirement). source2026-06-14
CompTIA Cloud+CompTIA2–3 years of hands-on experience as a systems administrator or cloud engineer (a vendor recommendation, not a requirement). source2026-06-19
CompTIA Data+CompTIA18–24 months in a data analyst or similar job role, with exposure to databases, analytical tools, basic statistics, and data visualization (a vendor recommendation, not a requirement). source2026-06-19
CompTIA DataSys+CompTIAno prerequisites, with 2–3 years of experience in a database administrator role recommended (a vendor recommendation, not a requirement). source2026-06-19
CompTIA Linux+CompTIA12 months of hands-on experience with Linux servers; CompTIA A+, Network+, or Server+, or comparable knowledge is recommended. (a vendor recommendation, not a requirement). source2026-06-19
CompTIA Network+CompTIACompTIA recommends A+ plus 9–12 months of hands-on experience in a junior network role (a recommendation, not a requirement). source2026-06-14
CompTIA Project+CompTIAequivalent to 6–12 months of hands-on experience managing projects in a tech environment (a vendor recommendation, not a requirement). source2026-06-19
CompTIA Security+CompTIACompTIA recommends Network+ plus about 2 years of security/systems-administration experience (a recommendation, not a requirement). source2026-06-14
CompTIA Server+CompTIACompTIA A+ certified or equivalent knowledge, with two years of hands-on experience in a server environment (a vendor recommendation, not a requirement). source2026-06-19
Databricks Certified Data Engineer ProfessionalDatabricksRelated course attendance and one year of hands-on experience in data engineering tasks outlined in the exam guide are highly recommended. source2026-06-26
Databricks Certified Machine Learning ProfessionalDatabricksCourse attendance and one year of hands-on Databricks experience are highly recommended. source2026-06-26
Fortinet NSE 5 - FortiAnalyzer 7.6 AnalystFortinetA minimum of 6 months to 1 year of hands-on experience with FortiGate and FortiAnalyzer is recommended. source2026-06-26
Fortinet NSE 5 - FortiManager 7.6 AdministratorFortinetA minimum of 6 months to 1 year of hands-on experience with FortiGate and FortiManager is recommended. source2026-06-26
Fortinet NSE 5 - FortiWeb 8.0 AdministratorFortinet3 years of experience with networking; 1 year of experience with network security; A minimum of 6 months of hands-on experience with FortiWeb source2026-06-26
Fortinet NSE 6 - FortiMail 7.4 AdministratorFortinet3 years of experience with networking; 1 year of experience with network security; Minimum of 6 months of hands-on experience with FortiMail source2026-06-26
Fortinet NSE 6 - LAN Edge 7.6 ArchitectFortinet3 years of experience with networking (wireless and wired); 1 year of experience with network security; 1 year of experience with identity management and access control source2026-06-26
Fortinet NSE 6 - Network Security 7.6 Support EngineerFortinet3 years of experience with networking; 3 years of experience with network security; Minimum of 2 years of hands-on experience with FortiGate source2026-06-26
Fortinet NSE 6 - OT Security 7.6 ArchitectFortinetA minimum of 2 years of experience in design, implementation, and integration of the Fortinet solution in an OT infrastructure is recommended. source2026-06-26
Fortinet NSE 6 - SD-WAN 7.6 Enterprise AdministratorFortinet3 years of experience with networking; 3 years of experience with network security; 2 years of experience with FortiGate and FortiManager source2026-06-26
Fortinet NSE 7 - Enterprise Firewall 7.6 AdministratorFortinet3 years of experience with networking; 3 years of experience with network security; 2 years of experience with FortiGate, FortiManager, and FortiAnalyzer source2026-06-26
Fortinet NSE 7 - Public Cloud Security 7.6.4 ArchitectFortinet2 year of experience with Fortinet security solutions; 2 years of experience with AWS cloud; 2 years of experience with Azure cloud source2026-06-26
Fortinet NSE 7 - Security Operations 7.6 ArchitectFortinet1 year of experience with network security; 6 months of experience working in SOC source2026-06-26
Professional Cloud ArchitectGoogle Cloud3+ years of industry experience including 1+ years designing and managing solutions using Google Cloud source2026-06-08
Professional Cloud Database EngineerGoogle Cloud5+ years of overall database and IT experience, including 2 years of hands-on experience working with Google Cloud database solutions source2026-06-08
Professional Cloud DeveloperGoogle Cloud3+ years of industry experience including 1+ years designing and managing solutions using Google Cloud. source2026-06-08
Professional Cloud DevOps EngineerGoogle Cloud3+ years of industry experience including 1+ years designing and managing production systems using Google Cloud source2026-06-08
Professional Cloud Network EngineerGoogle Cloud3+ years of industry experience including 1+ years designing and managing solutions using Google Cloud source2026-06-08
Professional Cloud Security EngineerGoogle Cloud3+ years of industry experience including more than 1 year designing and managing solutions using Google Cloud source2026-06-08
Professional Data EngineerGoogle Cloud3+ years of industry experience including 1+ years designing and managing data solutions using Google Cloud. source2026-06-08
Professional Machine Learning EngineerGoogle Cloud3+ years of industry experience including 1 or more years designing and managing solutions using Google Cloud. source2026-06-08
Salesforce Certified Business AnalystSalesforceBusiness analyst who understands business needs, captures requirements, and collaborates with stakeholders on Salesforce solutions. source2026-06-26
Salesforce Certified Data Cloud ConsultantSalesforceConsultant with experience implementing and consulting on enterprise data platforms in a customer-facing role. source2026-06-26
Salesforce Certified Platform Administrator IISalesforceSeasoned Salesforce administrators who can apply advanced platform features to business problems. source2026-06-26
Salesforce Certified Platform DeveloperSalesforceDeveloper who understands custom business logic and interfaces on Lightning Platform and when to use declarative versus programmatic methods. source2026-06-26
Salesforce Certified Platform Developer IISalesforceExperienced Salesforce developer using advanced programmatic platform capabilities, data modeling, and complex business logic. source2026-06-26
Salesforce Certified Sales Cloud ConsultantSalesforceConsultant trained to design and implement sustainable, scalable Sales Cloud solutions for customer success. source2026-06-26
Salesforce Certified Service Cloud ConsultantSalesforceConsultant who designs and implements scalable Service Cloud solutions meeting customer business requirements. source2026-06-26
SnowPro Advanced: AdministratorSnowflake2 or more years of hands-on experience with Snowflake as an Administrator in a production environment source2026-06-26
SnowPro Advanced: ArchitectSnowflake2 or more years of hands-on experience with Snowflake as an Architect in a production environment source2026-06-26
SnowPro Advanced: Data AnalystSnowflake1 or more years of hands-on practical experience with Snowflake as a Data Analyst in a production environment source2026-06-26
SnowPro Advanced: Data EngineerSnowflake2 or more years of hands-on experience as a Data Engineer in a production environment source2026-06-26
SnowPro Advanced: Data ScientistSnowflake2 or more years of hands-on experience with Snowflake as a Data Scientist in a production environment source2026-06-26
SnowPro Specialty: Gen AISnowflake1 or more years of Gen AI experience with Snowflake, in an enterprise environment source2026-06-26
SnowPro Specialty: SnowparkSnowflake1 or more years of hands-on Snowpark experience in a production environment source2026-06-26
VMware Certified Advanced Professional - Network Virtualization DeployVMware (Broadcom)1-2 years of relevant data center or virtualization experience is recommended; the minimally qualified candidate statement requires a VCP-NV certification. source2026-06-26
VMware Certified Advanced Professional - Network Virtualization DesignVMware (Broadcom)The VMware Certified Advanced Professional - Network Virtualization Design (VCAP-NV Design) certification verifies an individual's advanced skills in designing VMware NSX solutions, including network security, segmentation, and integration with other technologies. Job-roles associated with this certification include Network Virtualization architects and consultants. source2026-06-26
VMware Certified Advanced Professional - VMware Cloud Foundation NetworkingVMware (Broadcom)The VMware Certified Advanced Professional – VCAP Administrator Networking certification validates a candidate’s ability to design, deploy, configure, manage, and troubleshoot VMware Cloud Foundation (VCF) Networking environments across enterprise and multi-cloud infrastructures. Successful candidates demonstrate a strong understanding of VCF Networking features, functions, and architecture, as well as integration with VMware vSphere. source2026-06-26
VMware Certified Advanced Professional - VMware Cloud Foundation StorageVMware (Broadcom)The VMware Certified Advanced Professional – VCAP Administrator Storage certification validates a candidate’s ability to design, configure, manage, and troubleshoot advanced storage capabilities in VMware Cloud Foundation (VCF) environments. This certification is intended for experienced architects, storage specialists, virtualization professionals, and systems administrators responsible for designing and operating resilient, secure, and high-performance storage in VMware Cloud Foundation (VCF) environments. source2026-06-26
VMware Certified Professional - VMware Cloud Foundation AdministratorVMware (Broadcom)At least 1 year of IT experience is recommended; at least 6 months with the relevant VMware product/components is recommended; the minimally qualified candidate has the knowledge to install, configure, manage, and perform basic troubleshooting of a VMware Cloud Foundation (VCF) solution. source2026-06-26
VMware Certified Professional - VMware Cloud Foundation SupportVMware (Broadcom)The VMware Certified Professional - VMware Cloud Foundation Support (VCP-VCF Support) certification validates the skills required to support and troubleshoot private cloud environments built on VMware Cloud Foundation (VCF). This certification is designed for IT professionals expanding from existing support infrastructure roles and into cloud administration / Site Reliability Engineer (SRE) roles. Candidates for this certification include professionals responsible for implementing, maintaining and supporting VCF infrastructure in a way that contributes to an organization meeting service level source2026-06-26
VMware Certified Professional - VMware vSphere Foundation SupportVMware (Broadcom)The VMware Certified Professional - VMware vSphere Foundation Support(VCP-VVF support) certification validates a candidate's skills in standard troubleshooting techniques and methodologies to issues encountered during the deployment and operation of VMware vSphere Foundation (VVF). It confirms a high-level understanding of VVF, including its features, functions, components, and architectural models. Key components covered include VCF Operations, vCenter, VMware ESX, VMware vSAN, and VMware Operations for logs. source2026-06-26

Advanced — about three to five years suggested (9)

The vendor points at several years in the relevant role before sitting the exam.

CertificationVendorWhat we found on the vendor’s pageRead on
CCNP AutomationCiscoCisco states there are no formal prerequisites; learners often have three to five years of experience implementing solutions in the certification technology area. source2026-06-26
CCNP CollaborationCiscoCisco states there are no formal prerequisites; learners often have three to five years of experience implementing solutions in the certification technology area. source2026-06-26
CCNP Data CenterCiscoCisco states there are no formal prerequisites; learners often have three to five years of experience implementing solutions in the certification technology area. source2026-06-26
CCNP EnterpriseCiscoCisco states there are no formal prerequisites; learners often have three to five years of experience implementing solutions in the certification technology area. source2026-06-26
CCNP Service ProviderCiscoCisco states there are no formal prerequisites; learners often have three to five years of experience implementing solutions in the certification technology area. source2026-06-26
CompTIA CySA+CompTIAAbout 4 years in a SOC analyst or vulnerability analyst role. source2026-07-08
CompTIA PenTest+CompTIA3–4 years in a penetration tester job role, with Network+ and Security+ or equivalent knowledge (a vendor recommendation, not a requirement). source2026-06-19
Palo Alto Networks Certified Cloud Security EngineerPalo Alto NetworksVendor page states candidates have 3+ years in a cloud security-related field and 1-2 years with Palo Alto Networks cloud security solutions or Cortex platform and/or other CNAPP solutions. source2026-07-30
PMI-PMOCP - PMI PMO Certified ProfessionalProject Management InstitutePMI certifications page states 3+ years of experience. source2026-06-26

Expert — experience required to certify, or five or more years expected (48)

The vendor either makes documented experience a condition of certifying, or expects five or more years. Where it is a requirement, passing the exam alone does not certify you — and the requirement is what puts the credential here, so a one-year requirement sits in this group while a five-year suggestion elsewhere may not.

CertificationVendorWhat we found on the vendor’s pageRead on
AAIA - Advanced in AI AuditISACACandidates must hold CISA or another qualified designation with an IT audit or IT advisory role focus. source2026-06-26
AAIR - Advanced in AI RiskISACADesigned for risk professionals that hold: • An ISACA designation: CISA, CISM, CGEIT, CRISC, CDPSE • A non-ISACA designation: AACA, ACA, ANAN CNA, CA ANZ, Canadian CPA, CERP , CGMA, CGRC, CIA, CISSP , CPA HKICPA, CRCM, CRMA, CRMP , CRMP-FED, FCA, FCA ANZ, FCCA, FCPA HKICPA, Japanese CPA source2026-06-26
AAISM - Advanced in AI Security ManagementISACAProven experience in security or advisory roles, with some expertise assessing, implementing, and maintaining AI systems. source2026-06-26
AWS Certified Advanced Networking - SpecialtyAmazon Web ServicesAWS states the ideal candidate should have five or more years of networking experience, including two or more years of cloud and hybrid networking experience. source2026-06-26
AWS Certified Security - SpecialtyAmazon Web ServicesIntended for experienced individuals with five years of IT security experience designing and implementing security solutions and two or more years hands-on securing AWS workloads. source2026-06-26
CCDECiscoLearners are recommended to have five to seven years of experience with designing and architecting network solutions, as well as engaging in other related activities, such as pre-sales work. source2026-06-12
CCIE AutomationCiscoCisco states there are no formal prerequisites; learners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing the certification technology area. source2026-06-26
CCIE CollaborationCiscoCisco states there are no formal prerequisites; learners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing the certification technology area. source2026-06-26
CCIE Data CenterCiscoCisco states there are no formal prerequisites; learners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing the certification technology area. source2026-06-26
CCIE Enterprise InfrastructureCiscoCisco states there are no formal prerequisites; learners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing the certification technology area. source2026-06-26
CCIE SecurityCiscoLearners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing security technologies and solutions. source2026-06-12
CCIE Service ProviderCiscoCisco states there are no formal prerequisites; learners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing the certification technology area. source2026-06-26
CCIE WirelessCiscoLearners are recommended to have five to seven years of experience with designing, deploying, operating and optimizing enterprise wireless technologies and solutions prior to taking the exam. source2026-06-12
CCNP CybersecurityCiscoCandidates often have three to five years of experience implementing enterprise networking solutions. source2026-06-12
CCNP SecurityCiscoLearners often also have three to five years of experience implementing security solutions. source2026-06-12
CCSP - Certified Cloud Security ProfessionalISC2Must satisfy ISC2 certification work-experience requirements to become fully certified. source
Second route: Pass the exam to become an Associate of ISC2; CCSP Associate status can be held up to 6 years while you earn the 5 years of required experience before full certification. source
2026-07-07
CDPSE - Certified Data Privacy Solutions EngineerISACAA minimum of 3 years of cumulative work experience performing the tasks of a CDPSE professional is required; the experience must be gained within the 10 years preceding the certification application. source
Second route: Take the exam first; candidates have 5 years from the passing date to apply after meeting the experience requirement.
2026-06-25
Certified Application Security Engineer (CASE JAVA)EC-CouncilEC-Council's CASE .NET / Java eligibility table lists 2 years of information-security-related experience for the direct exam route; the eligibility process states applicants who do not attend training must have at least 2 years of work experience in the InfoSec domain. source
Second route: Attend official EC-Council CASE training through an Accredited Training Center, iClass, or approved academic institution; EC-Council also lists official courseware bundle purchase as eligible to attempt the exam.
2026-06-26
Certified Application Security Engineer (CASE.NET)EC-CouncilEC-Council's CASE .NET / Java eligibility table lists 2 years of information-security-related experience for the direct exam route; the eligibility process states applicants who do not attend training must have at least 2 years of work experience in the InfoSec domain. source
Second route: Attend official EC-Council CASE training through an Accredited Training Center, iClass, or approved academic institution; EC-Council also lists official courseware bundle purchase as eligible to attempt the exam.
2026-06-26
Certified Chief Information Security Officer (CCISO)EC-CouncilEC-Council lists 5 years of information-security experience across all domains for the no-training route: Governance, Risk, Compliance; Information Security Controls and Audit Management; Security Program Management and Operations; Information Security Core Competencies; and Strategic Planning, Finance, Procurement, and Third-Party Management. The page also states that candidates with official training must show experience in three of the five CCISO domains. source
Second route: Attend official CCISO training; even with training, EC-Council still requires the candidate to show experience in three out of the five CCISO domains before taking the CCISO exam and earning the certification.
2026-06-26
Certified Cloud Security Engineer (CCSE)EC-CouncilEC-Council lists 2 years of information-security-related experience for the CCSE direct exam route and states applicants who do not attend training must have a minimum of 2 years work experience in the InfoSec domain. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; official training makes the candidate eligible to attempt the exam.
2026-06-26
Certified Encryption Specialist (ECES)EC-CouncilDirect exam candidates need eligibility approval and a non-refundable application fee. Official courseware purchase is also listed as a route that makes the candidate eligible to attempt the exam. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; EC-Council also lists official courseware bundle purchase as eligible to attempt the exam.
2026-06-26
Certified Ethical Hacker (CEH)EC-CouncilEC-Council lists 2 years' experience across domains including information security and ethical hacking overview, reconnaissance, system hacking, network and perimeter hacking, web application hacking, wireless network hacking, mobile/IoT/OT hacking, cloud computing, and cryptography. Work experience is verified through references in the eligibility application. source
Second route: Attend official EC-Council training through an Accredited Training Center, EC-Council official online learning, or an approved academic institution; official training makes the candidate eligible to attempt the exam.
2026-06-26
Certified Incident Handler (ECIH)EC-CouncilEC-Council states the ECIH program requires 1 year of Information Security work experience unless the candidate attends official training. The exam-domain list includes incident response and handling, process handling, forensic readiness and first response, email security incidents, application-level incidents, network and mobile incidents, insider threats, malware incidents, and cloud-environment incidents. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; official training makes the candidate eligible to attempt the exam.
2026-06-26
Certified Network Defender (CND)EC-CouncilEC-Council states the CND program requires 2 years of work experience in the Information Security domain unless the candidate attends official training; self-study applicants submit an eligibility application and verifier details. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; official training makes the candidate eligible to attempt the relevant exam.
2026-06-26
Certified SOC Analyst (CSA)EC-CouncilEC-Council states the CSA program requires 1 year of work experience in the Network Admin/Security domain unless the candidate attends official training. The direct-exam path requires eligibility approval. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; EC-Council also lists official courseware bundle purchase as eligible to attempt the exam.
2026-06-26
Certified Threat Intelligence Analyst (CTIA)EC-CouncilEC-Council states the CTIA program requires 2 years of work experience in the Information Security domain unless the candidate attends official training. The direct-exam path requires eligibility approval and verifier-backed experience proof. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; official training makes the candidate eligible to attempt the exam.
2026-06-26
CGEIT - Certified in the Governance of Enterprise ITISACAA minimum of 5 years of experience managing, advising on, overseeing, or otherwise supporting governance of the IT-related contribution to an enterprise is required; it must span at least three of four CGEIT domains, include at least 1 year in Domain 1, and fall within the 10 years preceding application. source
Second route: Take the exam first; candidates have 5 years from the passing date to apply after meeting the experience requirement.
2026-06-25
CGRC - Governance, Risk and Compliance CertificationISC2Must satisfy ISC2 certification work-experience requirements to become fully certified. source
Second route: Pass the exam to become an Associate of ISC2; CGRC Associate status can be held up to 3 years while you earn the 2 years of required experience before full certification. source
2026-07-07
CISA - Certified Information Systems AuditorISACA5 years of professional information-systems auditing, control, or security experience gained within the 10 years preceding application; up to 3 years are substitutable by education/other credentials, so at least ~2 years of real experience remain. source
Second route: Pass the exam first — you then have 5 years from the passing date to apply once you have the experience; or hold the CISA Associate designation (valid up to 4 years) until you meet it.
2026-06-14
CISM - Certified Information Security ManagerISACA5 years of information-security MANAGEMENT experience across at least 3 of the 4 CISM domains, within the 10 years preceding application; a maximum of 2 years is waivable — stricter than CISA. source
Second route: Pass the exam first — you then have 5 years from the passing date to apply once you have the management experience. There is no separate CISM Associate designation.
2026-06-14
CISSP - Certified Information Systems Security ProfessionalISC25 years of cumulative paid work experience in 2 or more of the 8 CISSP domains; qualifying part-time work and internships may count. ISC2 states that earning a post-secondary degree (bachelors or masters) in computer science, information technology (IT) or related fields may satisfy up to one year of the required experience, as may one additional credential from the ISC2 approved list, leaving a minimum of 4 years. source
Second route: Pass the exam to become an Associate of ISC2; you then have up to 6 years to earn the 5 years of required experience before the full CISSP is awarded. source
2026-07-26
CompTIA CloudNetXCompTIAat least 10 years of IT experience, including 5 years in a network architect role, with hybrid cloud environments and foundational knowledge equivalent to Network+, Security+, and Cloud+ (a vendor recommendation, not a requirement). source2026-06-19
CompTIA DataAICompTIA5+ years in data science or a similar role (a vendor recommendation, not a requirement). source2026-06-19
CompTIA SecurityXCompTIAminimum of 10 years of general hands-on IT experience, including 5 years of hands-on security, with Network+, Security+, CySA+, Cloud+, and PenTest+ or equivalent knowledge (a vendor recommendation, not a requirement). source2026-06-19
Computer Hacking Forensic Investigator (CHFI)EC-CouncilEC-Council states the CHFI program requires 2 years of work experience in the Information Security domain unless the candidate attends official training; self-study applicants submit an eligibility application and verifier details. source
Second route: Attend official EC-Council training at an Accredited Training Center, via iClass, or through an approved academic institution; official training makes the candidate eligible to attempt the CHFI exam.
2026-06-26
CRISC - Certified in Risk and Information Systems ControlISACAA minimum of 3 years of professional information-systems auditing, control, or security work experience as described in the CRISC job-practice areas is required; the experience must be within the 10 years preceding the certification application. source
Second route: Take the exam first; candidates have 5 years from the passing date to apply after meeting the experience requirement.
2026-06-25
CSSLP - Certified Secure Software Lifecycle ProfessionalISC2Must satisfy ISC2 certification work-experience requirements to become fully certified. source
Second route: Pass the exam to become an Associate of ISC2; CSSLP Associate status can be held up to 5 years while you earn the 4 years of required experience before full certification. source
2026-07-07
ISSAP - Information Systems Security Architecture ProfessionalISC2ISC2 lists CISSP plus 2 years or 7 years cumulative experience for full ISSAP certification. source
Second route: Pass the exam to become an Associate of ISC2; ISSAP Associate status can be held up to 8 years while you earn the required experience before full certification. source
2026-07-07
ISSEP - Information Systems Security Engineering ProfessionalISC2ISC2 lists CISSP plus 2 years or 7 years cumulative experience for full ISSEP certification. source
Second route: Pass the exam to become an Associate of ISC2; ISSEP Associate status can be held up to 8 years while you earn the required experience before full certification. source
2026-07-07
ISSMP - Information Systems Security Management ProfessionalISC2ISC2 lists CISSP plus 2 years or 7 years cumulative experience for full ISSMP certification. source
Second route: Pass the exam to become an Associate of ISC2; ISSMP Associate status can be held up to 8 years while you earn the required experience before full certification. source
2026-07-07
Palo Alto Networks Certified Network Security ArchitectPalo Alto NetworksVendor page states candidates have 5+ years of experience architecting for Zero Trust across the Network Security platform and 2+ years of Palo Alto Networks hands-on experience. source2026-07-30
Palo Alto Networks Certified Security Operations ArchitectPalo Alto NetworksVendor page states candidates have 5+ years of experience designing security operations incident response and threat detection/prevention solutions and 2+ years of Palo Alto Networks hands-on experience. source2026-07-30
PMI-ACP - PMI Agile Certified PractitionerProject Management InstituteHigh school or secondary diploma or higher; agile experience via one of several paths, including 2 years agile experience in the past 5 years, GAC degree plus 1 year, third-party agile certification plus 1 year, or PMP certification; 21 hours agile training. source2026-06-26
PMI-RMP - PMI Risk Management ProfessionalProject Management InstituteOne of PMI-RMP eligibility sets: 36 months/3 years risk management experience with secondary diploma, 24 months/2 years with bachelor degree or higher, or 12 months/1 year with GAC-accredited bachelor degree or higher; plus risk-management education hours. source2026-06-26
Project Management ProfessionalProject Management InstitutePMI requires one of three eligibility sets before applying: high-school/secondary diploma plus 60 months/5 years leading and managing projects in the past 8 years; bachelor degree or higher plus 36 months/3 years; or GAC-accredited bachelor degree or higher plus 24 months/2 years. Each route also requires 35 hours of project-management education/training or an approved substitute such as CAPM. source
Second route: CAPM or PMI-approved PMP exam-prep training can satisfy the 35-hour education/training requirement; it does not replace project-leadership experience.
2026-06-25
SSCP - Systems Security Certified PractitionerISC21 year of cumulative paid work experience in at least 1 of the 7 SSCP domains; qualifying part-time work and internships may count. A qualifying post-secondary degree can satisfy up to the full 1-year requirement. source
Second route: Pass the exam to become an Associate of ISC2; you then have up to 2 years to earn the 1 year of required experience before full certification. source
2026-07-26
VMware Certified Advanced Professional - VMware Cloud Foundation AutomationVMware (Broadcom)The VMware Certified Advanced Professional – VCAP Administrator Automation certification validates the expertise required to support and troubleshoot private cloud environments built on VMware Cloud Foundation (VCF). Candidates for this certification are typically responsible for implementing, maintaining, and supporting VCF infrastructure to help their organizations meet service level objectives related to availability, performance, and security. Earning this certification demonstrates a professional’s ability to effectively diagnose and resolve issues within VCF-based private cloud environme source2026-06-26

Common questions

Is this a pass rate?
No. We have not found a published candidate pass rate for any vendor on this page, and RoleMath does not estimate one. This page groups certifications by the experience each vendor says it expects — a published fact you can check on the linked page, on the date we read it.
Does a later stage mean a better certification?
No. It means the vendor assumes more prior experience. A credential aimed at beginners is not worth less; it is aimed at a different point in a career.
Why are some certifications missing?
Because we have not recorded a published statement from their vendor about required or recommended experience. Rather than guess from the product name, those certifications simply do not appear — which is why the length of this page is itself a statement about how much RoleMath has verified and recorded.

Where to go next

A certification’s own page carries this statement in context, along with whatever RoleMath has recorded about its exam format, its cost, and the roles it maps to. Browse the full index →