certification
A cited second opinion for choosing your next tech certification or training path.
Compare certification options for my goalCertification details change. Always confirm final pricing, availability, and credential terms on the official provider page linked in the sources below before you pay for anything.
The call: Take it once you already have the experience the vendor requires (5 years). up to 3 years are substitutable by education/other credentials, so at least ~2 years of real experience remain. Skip sitting it cold — the experience is the real gate here, not the exam.
CISA - Certified Information Systems Auditor gates full certification behind substantial work experience. You can study the domains and even sit the exam, but the honest path is to build that experience first — it is a vendor requirement, not a RoleMath judgment. Vendor-recommended experience · checked
The vendor’s stated audience, plus an honest fit for your starting point. No pass rates, no guarantees.
Per ISACA: 5 years of professional information-systems auditing, control, or security experience are required for full CISA certification; you can take the exam before meeting the experience requirement. ISACA Credentialing (CISA / CISM) · checked
General funding research checklist: vouchers, WIOA, Workforce Pell, GI Bill, and employer education assistance may be worth checking. This list is not evidence that this credential, exam, or provider qualifies; confirm eligibility with the official program before relying on funding. Compare funding options →
Expert stage. Read ISACA's own wording below for the experience this credential asks for; our stage grouping does not describe it closely enough to repeat here.
Required to certify: 5 years [vendor page]
| Length | 4 hours |
|---|
Exam details read from CISA - Certified Information Systems Auditor — official vendor page · checked 2026-06-09T00:59:45+00:00.
Exam fee plus what it takes to keep it — the recurring cost most pages hide.
We publish no ROI or payback figure for this credential. See the full cost breakdown →
How ISACA administers the exam — the logistics only. This is format, not a pass prediction, and it says nothing about how hard the material is for your background.
Policies change; verify delivery, ID, room-scan, reschedule, and refund rules on the official page before you book or pay. See exam-day logistics →
CISA - Certified Information Systems Auditor — official vendor page · checked ISACA Credentialing (CISA / CISM) · checkedVendor-published objective domains and exam weights, normalized for display; use the cited official objectives for exact wording. CISA - Certified Information Systems Auditor — official vendor page · checked
2 free resources on record
Official sources control exam scope. Independent resources are reviewed for usefulness and labeled; none is a pass guarantee or affiliate recommendation.
What's required vs merely recommended — stated plainly.
ISACA’s own framing of who earns it and what it signals, plus their free official study material. Quoted and cited — never dressed up as a job guarantee.
The DoD lists this certification as an approved foundational qualification option for 6 cyber work roles, per the DoD 8140 qualification matrix (V2.1, effective 2025-09-19; checked 2026-08-07). These are work-role classifications, not job openings, not hiring eligibility, and not evidence that these roles are available to you.
Mapped at advanced proficiency
This covers the foundational step only. DoD 8140 qualification has more than one part: a foundational qualification, then a resident on-the-job qualification within the role, then continuing professional development. A certification can satisfy the foundational part. It does not by itself qualify anyone for the work role.
It is also one route, not the required one. The DoD lists a qualifying degree, approved training, or a certification as alternatives to the same foundational baseline. And a certification approved at a higher proficiency level also applies at lower proficiency levels for that same work role, so the level shown above is where the matrix maps it, not a ceiling.
The matrix sets the department-wide baseline. A component, command, or contract may set stricter foundational requirements for a particular position, and environment-specific resident requirements are left to component discretion — so this cannot tell you what one specific job will ask for. Sources: the DoD 8140 qualification matrix V2.1 (XLSX) for the mappings, and DoDM 8140.03 (PDF) for the qualification lifecycle. IAT, IAM and IASAE levels belong to DoD 8570.01-M, which DoDM 8140.03 cancelled, and are not part of 8140.
Yes. CISA runs on a 3-year certification cycle and must be maintained to stay active (as of 2026-06-14).
CISA requires an annual maintenance fee plus CPE credits across each three-year cycle.
Citations: ISACA - Maintain Your CISA, https://www.isaca.org/credentialing/cisa/maintain-cisa-certification (as of 2026-06-14).
Weighing CISA for an audit/assurance path? RoleMath's free planner checks the fit - nobody pays us to recommend anything.
Maintain CISA by paying ISACA's annual maintenance fee and earning CPE credits across the 3-year cycle (as of 2026-06-14).
Renewal is ongoing: pay annually and log CPEs (minimum 20/year) toward the cycle total.
Citations: ISACA - Maintain Your CISA, https://www.isaca.org/credentialing/cisa/maintain-cisa-certification (as of 2026-06-14).
RoleMath maps your audit/security track and the CPE commitment against your goal - free.
The CISA maintenance fee is $45/year for ISACA members ($85/year for non-members), and you need 120 CPE credits per 3-year cycle (minimum 20/year) (as of 2026-06-14).
Rates shown are the maintenance fee only; ISACA membership has its own separate annual cost, and the CISA exam is $575 member / $760 non-member.
Citations: ISACA - Maintain Your CISA, https://www.isaca.org/credentialing/cisa/maintain-cisa-certification; exam https://www.isaca.org/credentialing/cisa (as of 2026-06-14).
RoleMath plans the full multi-year cost of carrying CISA, member or not - free, no upsell.
This table lists the page’s core content records and when they were checked. Claim-specific citations appear beside the relevant text and may not be repeated here.
| ID | Supports | Source | Checked |
|---|---|---|---|
| CIT-01 | Public official credential page for CISA - Certified Information Systems Auditor. | ISACA Certifications | 2026-06-12T17:53:02+00:00 |
| CIT-02 | Supports official facts for CISA - Certified Information Systems Auditor. | Official ISACA objective-domain source | 2026-06-09T00:59:45+00:00 |
| CIT-03 | Supports official facts for CISA - Certified Information Systems Auditor. | Official Html And Pdf | 2026-06-09T00:59:45+00:00 |
| CIT-04 | Supports official facts for CISA - Certified Information Systems Auditor. | CISA maintenance requirements page | 2026-06-09T00:59:45+00:00 |
| CIT-05 | Supports official facts for CISA - Certified Information Systems Auditor. | CISA exam candidate guide | 2026-06-09T00:59:45+00:00 |
| CIT-06 | Supports official facts for CISA - Certified Information Systems Auditor. | ISACA Continuing Professional Education Policy > | 2026-06-09T00:59:45+00:00 |
| CIT-07 | Supports official facts for CISA - Certified Information Systems Auditor. | ISACA exam day rules guide | 2026-06-09T00:59:45+00:00 |
| CIT-08 | Supports official facts for CISA - Certified Information Systems Auditor. | ISACA exam scheduling guide | 2026-06-09T00:59:45+00:00 |
| CIT-09 | Supports official facts for CISA - Certified Information Systems Auditor. | CISA official source page | 2026-06-09T00:59:45+00:00 |
Ready to turn this decision into a plan?
Find out if CISA - Certified Information Systems Auditor fits your background.