Rescheduling is free 48 hours before your appointment. Inside 48 hours, you must sit the exam or forfeit the fee. A missed appointment forfeits the fee too.
How long do you need to study for the CISA exam before you sit it?
ISACA publishes no required study hours and no official pass rate. One training provider's planning guide suggests 80 to 250 focused hours. That is 10 to 12 hours a week over 12 to 24 weeks. Treat it as one estimate, not an ISACA standard.
| Your background | Study hours | Weekly commitment | Wall-clock time |
|---|
| Working IT auditor | 80 to 120 hours | 10 to 12 hours a week | 8 to 12 weeks |
| IT or security professional new to audit | 150 to 200 hours | 10 to 12 hours a week | 14 to 18 weeks |
| New to IT audit | 250 hours or more | 10 to 12 hours a week | 20 to 24 weeks |
Many pages answering cisa certification how long does it take stop at study hours. They skip the booking window and the experience rule. Since no official pass rate exists, measure yourself instead. Aim for 80 percent or better on full-length practice exams. Keep every domain above 75 percent. For the credential's full scope, read what is CISA certification.
How long does it take to get a CISA test date once you have paid?
The exam fee is US$575 for an ISACA member. It is US$760 for a non-member. The fee is nonrefundable and nontransferable. Once it clears, you can book as early as 48 hours later. Appointment dates only open 90 days ahead. The seat you want may not exist yet.
Your eligibility window is six months from the date you register. Take the exam inside that window or your fees are forfeited. ISACA sells one six-month extension for US$75. You can buy it near the end of the period.
Seats open only 90 days ahead. The window runs six months. Plan backwards from a date you want.
PSI, the company that manages appointments and remote proctoring, runs the test. You can sit at an authorized testing center or as a remotely proctored exam. Your seat is not tied to one country. The ISACA CISA page lists the fees and booking rules. Our CISA certification cost breakdown covers the money side. The best cybersecurity certifications for 2026 helps you compare credentials.
How much experience do you need before ISACA will certify you?
Nobody needs experience to sit the exam. ISACA checks your experience when you apply for the credential. That happens after you pass. You need five or more years of information systems auditing, control, or security work. At least two of those years must be in IT audit, control, or security. The work must fall inside the 10 years before you apply.
| Criteria | Passing the CISA exam | Holding the CISA certification |
|---|
| Who can register | Anyone | Candidates who meet the experience rule |
| When experience is checked | Never | When you apply after passing |
| Experience required | None | 5 years, at least 2 in IT audit, control, or security |
| Time limit | 6-month eligibility window | Apply within 5 years of passing |
| Cost | US$575 member, US$760 non-member | US$50 application processing fee |
| If you fail | Up to 4 attempts in a rolling year | Does not apply |
| Ongoing duty | None | 120 CPE hours per 3-year cycle, 20 a year |
| Yearly fee | None | US$45 member, US$85 non-member, due January 1 |
Waivers shorten the wait. You can claim one year of credit for general information systems or general audit work. Education credit can add up to three years. An associate degree gives one year. A bachelor's, master's, or doctorate gives two. A master's in information systems gives three. Total credit stops at three years. Two years of the right work can qualify you.
After you pass, you have five years to submit your application. A one-time US$50 processing fee applies. The Earn a CISA certification page sets out the checklist. Keeping the credential takes 120 Continuing Professional Education (CPE) hours per three-year cycle. At least 20 hours are due each year. An annual maintenance fee is due January 1. Members pay US$45. Non-members pay US$85. The ISACA maintenance page has the detail.
Over one three-year cycle, the exam fee plus the US$50 fee plus three annual fees comes to US$760 for a member. For a non-member, it comes to US$1,065. You can also compare the CISSP certification requirements.
What are your next steps?
Your date is set by the slowest clock you face. If your work history already qualifies, scheduling is the part you control. If it does not, start building eligible experience now. Treat the exam as the later goal.
- List the roles you can claim. Check whether they sit inside the 10-year window.
- Pick the study row that matches your background. Set a weekly hour target.
- Register and pay. Book the first seat that opens inside your six-month window.
- Budget for the failure path. Four attempts is the maximum in a rolling year.
Photo: hudsoncrafted, Pixabay Content License, via Pixabay (https://pixabay.com/photos/planner-march-calendar-schedule-4884740/)