Certification provider

ISACA practice exams

Where most certifications test configuration skills, ISACA tests governance: audit, security management, risk control and enterprise IT governance. Practice for these credentials is below, with worked explanations for every answer choice.

6 exam banks
4 discussion hubs

Overview

What is ISACA certification?

CISA (information systems audit), CISM (security management) and CRISC (risk and information systems control) are the core credentials, each experience-gated at five years. CGEIT covers enterprise governance of IT, CDPSE privacy engineering, and CCAK cloud auditing — developed jointly with the Cloud Security Alliance. COBIT anchors the framework side. The exams are stable and slow-moving, which is exactly why ISACA credentials carry weight in audit, GRC and leadership careers.

Exam	Level	Difficulty	Why candidates pick it
COBIT 2019 Foundation	Foundation	Entry	The framework introduction; no experience gate
CISA	Core	Advanced	Five years of audit experience required; the enduring standard for IT auditors
CISM	Core	Advanced	Security management for people who run programs rather than configure tools
CRISC	Core	Expert	Historically the lowest pass rates of the family; risk-control specialists' credential
CCAK	Specialist	Advanced	Cloud auditing, jointly developed with the Cloud Security Alliance

What is ISACA certification?

Most popular ISACA certifications

ISACA exam discussions

ISACA exam question banks

Browse another provider