ISACA certs are role certs, not a staircase you must climb in order. Pick the exam that matches the job you have or want: audit (CISA), security management (CISM), IT risk (CRISC), or governance (CGEIT).
Most common first ISACA exam: CISA practice →. Security managers: CISM practice →.
The four certs
| Cert | Job signal | Take it if you… |
|---|---|---|
| CISA | IT auditor / assurance | Assess controls, audits, and evidence |
| CISM | Security manager | Own the security program, not packet captures |
| CRISC | IT risk | Risk identification, response, and reporting to the business |
| CGEIT | IT governance | Board-level governance, investment, and resource oversight |
Experience is required for full certification (typically five years in the domain, with substitutions). You can often pass first and apply experience after — confirm current ISACA policy.
CISA vs CISM (the usual confusion)
| CISA | CISM | |
|---|---|---|
| Stance | Independent assurance | Build and run the program |
| Typical titles | IT auditor, compliance, SOX | Security manager, CISO track |
| Overlap | Controls language | Risk and governance language |
If you test security, start CISA. If you own security for a business unit, start CISM. Security engineers targeting architecture jobs usually want CISSP before either.
Compare: CISSP vs CISM.
Recommended picks by background
- Big Four / internal audit: CISA, then CRISC if you move into risk advisory.
- SOC lead becoming a manager: CISM (after Security+ / CISSP-level breadth).
- GRC analyst: CISA or CRISC depending on audit vs risk job posts.
- CIO / IT governance office: CGEIT (not a first cert).
Do not sit all four in one year. Employers hire one narrative.
How ISACA exams feel
Long, scenario-based, best answer items. The distractor is often a technically valid control that is wrong for governance or audit independence. Study the ISACA review manuals and drill until you can explain why the other three fail the role.
Ready to Pass Your CISA Exam?
Get 300+ practice questions with detailed explanations, flashcards, and full-length practice exams. Try 10 free practice questions. Unlock 300+ questions and timed exams when you are ready.
✓ Plans from $19.99/mo • ✓ Cancel anytime • ✓ 91 certifications
