CISA - Certified Information Systems Auditor

The Certified Information Systems Auditor (CISA) designation is awarded to those individuals with an interest in information systems auditing, control, and security who have met and continue to meet the following requirements regarding the CISA examination; information systems auditing, control or security experience; the continuing education program; and the code of professional ethics.

The CISA Examination

The examination is open to all individuals who have an interest in the information systems auditing, control, and security field. All are encouraged to work toward and take the examination. Successful examination candidates will be sent documents required to apply for certification with their notification of a passing score.

The CISA Review Course

The Chicago Chapter of ISACA invites you to take part in a CISA Review Course. Click here to learn more!

Experience Requirement

A minimum of five years professional information systems auditing, control, and security work experience is required for certification. Substitutions and waivers of such experience may be obtained as follows:


A maximum of 1 year of information systems experience OR 1 year of auditing experience can be substituted for 1 year of information systems auditing, control, or security experience.

60 to 120 completed college semester credit hours (the equivalent of an Associate or Bachelor degree) can be substituted for 1 or 2 years, respectively, of information systems auditing, control, or security experience, and

2 years as a full time university instructor in a related field (e.g., computer science, accounting, information systems auditing) can be substituted for 1 year Information systems auditing, control, or security experience.

Experience must have been gained within the 10 year period preceding the application date for certification or within 5 years from the date of initial passing of the examination. Retaking and successfully passing the examination will be required if the application for certification is not submitted within 5 years from the passing date of the examination. All experience will be verified independently with employers.