Post-CISA Exam: What Happens After You Pass
A complete guide to the steps and requirements that follow passing the CISA exam, from certification application to CPE maintenance.
Congratulations, Now What?
Passing the CISA exam is a significant achievement, but it is only the first step toward earning and maintaining the CISA certification. After receiving your passing score, several important steps remain before you can use the CISA designation. Understanding these post-exam requirements helps you plan ahead and avoid delays in your certification process.
Receiving Your Results
ISACA provides preliminary pass/fail results at the testing center immediately after you complete the exam. Official score reports are typically available within 10 business days through your ISACA account. Your report will indicate whether you passed and provide performance feedback by domain area, though exact scores are not disclosed.
Applying for Certification
Passing the exam alone does not grant you the CISA certification. You must submit a certification application within five years of your passing date. The application requires you to demonstrate that you meet ISACA's professional experience requirements.
Experience Requirements
- A minimum of five years of professional experience in information systems auditing, control, or security
- Experience must be verified by an employer or independent party
- Certain educational achievements and certifications can substitute for up to three years of experience
- Experience must be gained within the 10-year period preceding the application date or within 5 years after passing the exam
Adhering to Professional Standards
As part of the certification process, you must agree to ISACA's Code of Professional Ethics and comply with ISACA's IS Auditing Standards. These commitments govern your professional conduct and the quality of your audit work throughout your career as a certified professional.
Maintaining Your Certification
Continuing Professional Education (CPE)
CISA holders must earn a minimum of 20 CPE hours annually and 120 CPE hours over each three-year reporting period. CPE activities can include attending conferences, completing training courses, publishing articles, and participating in professional development activities. Track your CPE hours through your ISACA account to ensure compliance.
Annual Maintenance Fees
ISACA charges an annual certification maintenance fee. This fee is separate from ISACA membership dues (membership is not required to maintain the certification, though members receive a reduced maintenance fee). Pay your fees on time to keep your certification in good standing.
Career Next Steps
With your CISA certification in hand, consider how to leverage it for career advancement. Update your resume and LinkedIn profile, inform your employer, and explore new opportunities that the certification opens. Many CISA holders pursue additional certifications such as CISM, CRISC, or CGEIT to broaden their expertise. The CISA certification establishes a strong foundation for continued professional growth in IT audit, governance, and security.