ISACA (Information Systems Audit and Control Association), founded in 1969, is an international professional association with more than 145,000 members in the field of information security, risk, and assurance from 180 regions and countries. Its primary purpose is to help IT leaders and business leaders strengthen trust in information systems and information, and add value to them through its 200+ branches in more than 80 countries around the globe.
ISACA community members are primarily internal auditors, information security officers, regulators, information security auditors, consultants, and educators working in various industries. As such, ISACA is an internationally recognized association of experts in data control, analysis, security, and administration.
Certification Program
Specialist certifications are the main focus of ISACA? So earning one of the available certifications is a great tool to advance your IT career and validate your experience.
Currently, the accreditation program includes 8 key qualifications and a number of micro-certifications.
- CISA (Certified Information Systems Auditor) is an accreditation aimed at pros with confident skills in tracking, assessing, auditing, and controlling an organization's business and information technology systems. Moreover, this qualification track has been recognized as one of the highest-paid and most sought-after IT certifications, as it is an excellent entry tool for mid-level IT specialists. It requires the appropriate exam, the voucher for which costs $760 ($575 for ISACA members), as for all other tests of this vendor.
- CRISC (Certified in Risk and Information Systems Control) is an accreditation that is an indicator of the required experience in managing and identifying risks as well as implementing and maintaining effective information management systems. The best candidates for this qualification are mid-level IT professionals in cyber risk investigation and control.
- CISM (Certified Information Security Manager) is an accreditation that focuses on proving the candidate's experience in security, risk, and incident management, as well as program development and effective management. You need to pass an appropriate test to verify your technical knowledge and experience in the field of information security and control.
- CGEIT (Certified in the Governance of Enterprise IT) is an accreditation designed to comprehensively test skills in designing, evaluating, implementing, and managing enterprise IT management systems to achieve business objectives. The target audience is candidates aspiring to management positions.
- CSX-P (Cybersecurity Practitioner Certification) is an accreditation aimed at key cybersecurity skills based on the NIST Cybersecurity Framework, including identification, detection, response, protection, and recovery processes. As such, candidates must have the analytical ability to solve host and network cybersecurity problems and identify assets.
- CDPSE (Certified Data Privacy Solutions Engineer) accreditation covers the most current regulations and laws on information privacy in networks, applications, and IT systems. To earn this certificate, the candidate must be able to take the necessary steps to protect data in existing and new technology environments, collaborate with various departments and project managers.
- ITCA (Information Technology Certified Associate) is a new accreditation aimed at entry-level professionals able to prove fundamental knowledge of 5 domains, which include computing fundamentals, networks and infrastructure, cybersecurity, software development, and data science.
- CET (Certified in Emerging Technology Certification) accreditation covers the areas of business development, privacy, governance, cybersecurity, risk, and IT auditing. Thus, with this certification, you confirm your ability to effectively perform technical tasks as well as implement new technologies. Four separate certifications can be gained here that bring you the CET certification afterwards which will demonstrate your proficiency and professionalism. These certificates are as follows: Cloud Fundamentals, Blockchain Fundamentals, IoT Fundamentals, and Artificial Intelligence Fundamentals.
Along with the certifications covered above, ISACA offers the following certification tracks:
- COBIT Certifications to demonstrate one’s skills to use COBIT’s main concepts and principles (COBIT Foundation and COBIT Design and Implementation);
- IT Risk Fundamentals proves your knowledge of risk related to information and technology.
- CCAK (Certificate in Cloud Auditing Knowledge) testifies that you understand cloud terminology, solutions, and challenges.
- CSX Nexus Cybersecurity Certificates validate your cybersecurity knowledge as well as practical skills needed to complete real-world issues.
- Cybersecurity Audit Program checks candidates’ understanding of mitigating controls, cyber-related risk, as well as their knowledge needed to deal with cybersecurity audits