ISACA Certifications
ISACA certification pathways
Build expertise across audit, risk, security management and AI security
ISACA certifications are widely recognised across information systems audit, governance, technology risk and information security management. Choosing the right route depends on whether your role is focused on assurance, security leadership, risk and controls, or the management of emerging technologies.
ExperTrain currently offers instructor-led preparation for CISA, CISM and CRISC, together with Advanced in AI Security Management (AAISM) for experienced security professionals specialising in the governance, risk and security of enterprise AI.
Choose your direction
ISACA certification and training paths
Compare the ISACA pathways currently supported by instructor-led training through ExperTrain and choose the route that best matches your responsibilities and career goals.
CISA
IT Audit & Assurance
For professionals who audit, control, monitor and assess information systems and technology environments. The route covers audit processes, governance, systems implementation, operations, resilience and information asset protection.
CISM
Information Security Management
For experienced professionals moving into or already working in security management. The route focuses on security governance, risk management, security programme development and management, and incident management.
CRISC
Technology Risk & Controls
For professionals responsible for identifying, assessing and managing technology risk and ensuring appropriate information systems controls are designed, implemented, monitored and maintained.
AAISM
AI Security Management
An advanced route for experienced security professionals responsible for AI governance, AI risk management and the security controls required across the enterprise AI lifecycle. The ExperTrain course requires an active CISM or CISSP certification.
Broader certification portfolio
Other ISACA certification routes
ISACA offers additional credentials beyond the four pathways currently supported by ExperTrain training. Our present catalogue focuses on CISA, CISM, CRISC and AAISM because they align closely with the audit, risk, cyber security management and AI security requirements of our customers.
Browse the Cyber Security training catalogueFinding your starting point
Which ISACA certification is right for you?
Choose CISA if your work centres on auditing, assurance, controls and evaluating information systems and technology environments.
Choose CISM if you are responsible for information security governance, risk, programme management and incident management, particularly in a management or leadership role.
Choose CRISC if your role focuses on identifying and managing technology risk and designing, implementing or monitoring information systems controls.
Choose AAISM if you already hold CISM or CISSP and want to specialise in the governance, risk management and security of enterprise AI.
ISACA certification FAQs
Common questions
What is the difference between CISA, CISM and CRISC?
CISA focuses on audit and assurance, CISM on information security management, CRISC on technology risk and controls, and AAISM on advanced AI security management.
What is included with the ISACA preparation courses?
The CISA, CISM and CRISC courses currently include access to ISACA Questions, Answers and Explanations (QAE) practice resources. Check each course page for the latest information about exam vouchers and other inclusions.
What does QAE mean?
QAE stands for Questions, Answers and Explanations. It is an ISACA exam-preparation resource that provides practice questions and detailed explanations to help reinforce the knowledge covered by the certification syllabus.
Who is the AAISM course designed for?
The ExperTrain AAISM course is intended for experienced professionals and requires an active CISM or CISSP certification. It focuses on AI governance, AI risk management, secure AI architecture and related controls.
Ready to work towards an ISACA certification?
Explore our instructor-led ISACA courses or contact us if you would like help deciding whether CISA, CISM, CRISC or AAISM is the best match for your role.
.png){kind=small}
