CISA vs CISM
The published facts of both certifications side by side. Which one fits depends on your role, experience and goals; the Plan Advisor and Role readiness weigh them against your own profile.
| CISA ISACA Certified Information Systems Auditor |
CISM ISACA Certified Information Security Manager | |
|---|---|---|
| Issuer | ISACA | ISACA |
| Level | Intermediate | Expert |
| Domain | Security Assessment & Testing | Security & Risk Management |
| Exam fee | $760 | $760 |
| Experience required | 5 years | 5 years |
| Prerequisite certifications | None | None |
| Exam | 150 questions, 4 hours | 150 questions, 4 hours |
| Passing score | 450/800 | 450/800 |
| Renewal | Every 3 years · 120 CPE per cycle | Every 3 years · 120 CPE per cycle |
| Annual fee | $85 | $85 |
| Career tracks that use it | 3 | 4 |
Fees and requirements change: each certification's page links to the issuer's own terms. CertAscent lists them side by side; no issuer pays to be listed or compared.