Certified Information Systems Auditor (CISA)

CISA candidates must have a minimum of five years of professional experience and must undertake 20 hours of training per year to keep their designation.
To receive a Certified Information Systems Auditor certification, candidates must pass a comprehensive exam and satisfy industry work experience requirements. Candidates must also undergo continuing education and professional development and adhere to ISACA’s Code of Professional Ethics and Information Systems Auditing Standards.
CISA candidates must have a minimum of five years of professional experience in information systems auditing, control, or security. There are several work experience substitutions and waivers up to a maximum of three years that candidates can satisfy.
• A maximum of one year of information systems experience OR one year of non-information systems auditing experience. (Substitutes one year of work experience.)
• Sixty to 120 completed university semester credit hours. (Sixty credit hours substitutes one year of work experience, while 120 credit hours substitute two years of work experience.)
• A master’s or bachelor’s degree from a university that sponsors ISACA programs. (Substitutes one year of work experience.)
• A master’s degree in information security or information technology from an ISACA accredited university. (Substitutes one year of work experience.)
University instructors who have two years of experience in a related field, such as computer science, information systems auditing, or accounting, can substitute that experience for one year of work experience.