Frequently asked questions about the Certified Information Systems Auditor (CISA) certification. 

  • No, the CISA exam has no educational requirement. You may benefit from taking the exam while your information systems and auditing course work are still fresh in your mind. 
  • You should have five (5) years of professional experience in information systems auditing, control or security. The work experience should be within five years of your passing the exam. You may obtain a waiver of up to three years of the five years of experience requirement, including a waiver for up to two years of experience credit for 120 undergraduate credit hours.