IIA-CRMA-ADV test contents - Certification in Risk Management Assurance (CRMA Advanced) Updated: 2024

Your test invitation, or Notice to Schedule (NTS), email from Meazure Learning will have links for you to check your computer system. If you take your test online, it is important to verify that your computer meets the minimum requirements and that you have reliable access to the Internet. An internet connection disruption will suspend the test session. 

IMPORTANT: If taking the test online, you must use a computer on which you have full admin access.

Requirements:

• You must be alone in the room throughout the test
• You are required to have a webcam installed on your test workstation
• PC computers are recommended; however MACs are also acceptable
• Chromebooks, tablets, iPads, dual/multiple monitors, and projectors are not permitted to be used as a testing device
• Your computer must meet the system and equipment requirements listed here

Additional Resources

• Preview the Candidate Experience with ProctorU
• Browse the ProctorU Resource Center 

​If you have computer system questions after following the instructions provided by Meazure Learning's schedule confirmation email, please contact Meazure Learning at +1 919-572-6880 or candidatesupport@meazurelearning.com.

Note: Meazure Learning, Scantron, and ProctorU are all one-and-the-same organization.

• Your valid, government issued photo ID (e.g., driver's license, passport, state-issued ID card) 
• The printed test confirmation notice you received from Meazure Learning
• No other items can be brought into the test environment 
  • A calculator and any other necessary resource materials will be provided on the computer for those taking the test electronically
  • No reference material will be allowed in any test room
  • Please note that storage space will be limited

For all CCST level exams, Units Conversion Tables will be provided to candidates in either paper format (paper/pencil exams) or accessible within the electronic test interface for reference during the exam. Click here to review the Units Conversion Tables.

It is important to be certain when selecting the method and time you want to take the exam. You may incur fees if you change the time and method of testing. Exams must be scheduled in advance as follows: 

• Candidates in the United States and Canada: you must submit your scheduling request at least two calendar days prior to your desired test date
• Candidates in other countries: you must submit your scheduling request at least five calendar days prior to your desired test date

If you are within your test window or eligibility period, you may reschedule your test appointment before the online and Test Center reschedule cut-off times via the online test scheduling system. If you are outside your test window and want to request an extension, please contact certifications@isa.org.

Changing from online test to another online exam

There is no rescheduling fee. However, it must be changed no less than 24 hours prior to the scheduled appointment date and time.

Changing from online test to Test Center exam

There is no rescheduling fee. However, it must be changed at least 24 hours in advance of the scheduled appointment. Additionally, you must reschedule the new appointment no less than two calendar days in advance of the new appointment at a Meazure Learning test center.

Changing from Test Center test to another Test Center exam

You will incur a rescheduling fee of 50 USD. Rescheduling fees are payable to Meazure Learning via a secure e-commerce site (credit card). The reschedule cut-off time is no later than two calendar days prior to the test appointment. Additionally, if you are scheduling a new online test appointment, it must be done no less than 24 hours prior to the new appointment date and time.

Reschedule Fees:

CAP Associate and CST Associate:

• ISA members: 76 USD
• Non-members: 95 USD

All other Certificate Programs:

• ISA members: 120 USD
• Non-members: 150 USD

CAP Certification Program:

• ISA members: 108 USD 
• Non-members: 135 USD

CCST Certificate Programs:

• ISA members: 116 USD
• Non-members: 145 USD

You can cancel an test through Meazure Learning's online test scheduling system.

• Online test appointments must be cancelled no less than 24 hours prior to the scheduled appointment date and time. There is no cancellation fee
• Exam center appointments must be cancelled no less than two calendar days prior to the scheduled testing appointment. There is a cancellation fee of 50 USD payable to Meazure Learning via a secure e-commerce site (credit card)

You may retest as many times as needed, if you do not pass or if you miss your scheduled exam, within your test window or eligibility period. However, there is a fee each time that is payable to ISA. If you need to retest or have missed your exam, you must submit a request to certifications@isa.org.

If a candidate fails their exam, they may retest as many times as needed within their 12-month certification test window or six-month certificate eligibility period. There is a fee each time retesting is needed. If a candidate does not pass the test within the program test deadline, the applicant must reapply for that certification or register again for the certificate course to sit for the exam.

If you fail to appear for a scheduled test or arrive more than 15 minutes after the scheduled start time, you will be considered a no-show and forfeit your exam. However, you may retake a missed test by paying a rescheduling fee to ISA if you are within your test window or eligibility period. To request a rescheduled exam, email certifications@isa.org with your request. See test procedures section #4, Rescheduling an Exam, for reschedule fee costs.

You may qualify for an exception if you meet certain conditions and submit documentation to Meazure Learning no later than five calendar days after the scheduled test appointment. If the exception is approved, there will be a no-show exemption fee of 50 USD payable via secure e-commerce (credit card) and collected by Meazure Learning. Please contact Meazure Learning by phone at +1 919-572-6880 or email candidatesupport@meazurelearning.com for more details.
 

All ISA certification exams are closed-book and have multiple choice questions.  We apply a modified Angoff Method to determine the pass point for each test (learn more about the modified Angoff Method below). Our certification exams last between 3 and 4 hours and our certificate exams last two hours.

ISA does not provide a passing score; you are only notified whether you passed or failed. If you fail an exam, you will receive a score report that lists the domains and indicates the percentage of questions answered correctly within each domain. Note that the percentages are not used to calculate a candidate’s passing score.

You will see your test results on the screen at the completion of the exam. You will also receive your test results immediately via email from (candidatesupport@meazurelearning.com). If you do not receive an email containing your results within 24 hours, please contact Meazure Learning by phone at +1 919-572-6880 or email candidatesupport@meazurelearning.com for assistance. 

If you pass your exam, you will receive an email containing a digital badge from isa_badges@isa.org within one business day of completing the exam. To access, manage, and/or share your secure digital badge, use your email address and password to enter your BadgeCert portfolio. If it is the first time accessing your portfolio or if you have forgotten your password, click “Request new password?” on their login page to create your password. More information about using your digital badge can be found here.

Be advised that we update our databases and systems with the previous month’s test data in the first part of the following month.  ISA will update your credential status on the “My Credentials” tab from your ISA account and in ISA's Credential Directory within the first ten (10) business days of the following month you took your exam.

Modified Angoff Method

The modified Angoff Method uses expert judgements to determine the difficulty level of the exam. The easier the exam, the higher the pass point. Likewise, the more difficult the exam, the lower the pass point. The following is a basic outline of the modified Angoff Method (some details have been omitted):

• A group of subject matter experts (SMEs) independently rate each test question within a given form of the exam. The ratings are defined as the probability, or likelihood, that an acceptably (minimally) competent person with the requisite education and experience will answer the question correctly. An acceptably (minimally) competent person is defined as someone who adequately performs all job functions safely and requires no further training to do so.
• The SMEs review each test question as a group. A statistical consensus is reached for the difficulty rating of each test question.
• After the data is refined, the final step is to calculate the mean, or average, of all the test question ratings. This becomes the overall pass point estimation.

The Certified Information Systems Security Professional (CISSP®) credential demonstrates mastery of developing and overseeing large-scale cybersecurity programs. When it comes to the best cybersecurity certifications, many consider CISSP the industry’s gold standard. Individuals who meet CISSP requirements can earn the certification and qualify to take on more professional responsibility in their cybersecurity jobs.

This guide offers information on CISSP certification requirements, including experience, suggested preparation times and CISSP certification test costs.

What Is CISSP Certification?

CISSP certification, offered by (ISC)², is an advanced credential for information systems and cybersecurity professionals. This certification highlights an individual’s ability to create, deploy and manage cybersecurity efforts for large organizations.

CISSP certification requirements include a significant amount of professional experience and passing a lengthy exam. This credential suits experienced workers over entry-level and mid-level professionals.

Though this certification is not required by employers, it can boost candidates’ earning power and help them qualify for advanced roles in information security. CISSPs often work in positions like chief information security officer (CISO), network architect, security auditor and security manager, among others.

CISSP Certification Requirements

Aspiring CISSPs should familiarize themselves with the certification’s requirements before pursuing this credential.

Gain Experience

CISSP certification requirements stipulate that each candidate must have a minimum of five years of relevant professional experience. (ISC)² specifies eight security domains:

• Domain 1: Security and risk management
• Domain 2: Asset security
• Domain 3: Security architecture and engineering
• Domain 4: Communication and network security
• Domain 5: Identity and access management
• Domain 6: Security assessment and testing
• Domain 7: Security operations
• Domain 8: Software development security

Prospective CISSPs must accumulate experience in two of the eight domains to meet CISSP certification requirements. They can also apply (ISC)²-approved four-year college degrees and other credentials, which may qualify as a year of experience. Paid and unpaid internships also count toward the CISSP requirement.

Pass the Certification Exam

The CISSP test covers the eight domains of security in a four-hour test comprising 125 to 175 required responses. These appear as multiple-choice questions and advanced innovative items. Test-takers must earn a 700 out of 1,000 to pass. Candidates register to take the test with Pearson VUE.

Get Endorsed

After passing the exam, individuals can apply for endorsement online. The endorsement must come from an (ISC)²-certified professional who can advocate for your professional experience as a credential-holder in good standing. Individuals must receive endorsements within nine months of passing the exam.

Cost of Becoming a CISSP

Earning CISSP certification can deliver many professional benefits, but individuals should also understand the costs associated with pursuing the credential. Along with the required time investment, consider the following CISSP certification test costs and any required payments relating to preparation and recertification.

CISSP Certification test Prep

Many organizations offer prep courses for the CISSP certification exam, and their costs vary drastically. Make sure to include test prep costs, which may range from a few hundred dollars to a few thousand, in your CISSP budget. (ISC)² offers several test prep methods, including self-paced, instructor-led and team-based options.

CISSP Certification test Cost

The CISSP certification test costs $749. Individuals can receive vouchers from partner organizations after completing CISSP test training courses.

Recertification Cost

Individuals must meet CISSP recertification requirements every three years to maintain their credentials. Each certification holder must earn 120 continuing professional education (CPE) credits over this three-year period. Costs relating to CPEs can vary significantly, but each certified individual must pay an annual $125 fee to (ISC)².

Common Careers for CISSPs

Individuals who have met CISSP requirements and earned their credentials can pursue work in many information security and cybersecurity roles. As of 2023, the number of open cybersecurity roles far outpaces the number of qualified professionals, indicating strong continued demand in the sector.

We sourced salary information for this section from Payscale.

Data from Cyberseek.org indicates that among current cybersecurity openings requiring certification, CISSP ranks as the most in-demand credential. The following section explores roles for CISSP certification-holders.

Chief Information Security Officer

Average Annual Salary: Around $173,500
Required Education: Bachelor’s degree in cybersecurity, information security or a related field; master’s preferred
Job Description: CISOs rank among the top positions in information security for responsibility and salary. This C-suite role reports directly to the CEO and requires significant experience, practical skills and expertise in information security.

CISOs oversee their organizations’ information security efforts. Often referred to as “chief security officers,” they supervise teams of infosec workers, set organizational directives, establish company-wide best practices and manage resource allotment. CISOs working in large, international businesses may interact with government agencies and congresspeople to ensure compliance with legal standards for information security.

Information Technology Director

Average Annual Salary: Around $125,000
Required Education: Bachelor’s degree in computer science or related field, MBA degree often preferred
Job Description: IT directors oversee departments of IT workers and manage organizations’ computer systems operations. They provide solutions to companies’ computer-related issues, including software upgrades, security concerns and general technical issues. IT directors communicate with executives to ensure company-wide directives are carried out successfully.

These directors research new IT software and hardware to keep their organizations up to date and safe. They track metrics for managing IT professionals, along with storage, hardware and software. IT directors also handle employee schedules and budget planning. As department heads, they must possess strong communication skills to interact with mid-level professionals and C-suite executives.

Security Analyst

Average Annual Salary: Around $73,500
Required Education: Bachelor’s degree in cybersecurity, computer and information technology or a related field
Job Description: Security analysts work in computer systems, networks and information security departments to prevent, monitor and respond to security breaches. This broad professional title refers to workers who handle a variety of tasks in computer and network security.

These professionals work in many industries as “first responders” for cyberattacks. They must demonstrate deep knowledge of hardware, software and data storage to understand potential vulnerabilities and security solutions. Security analysts may help design security systems and handle encryption efforts for businesses to protect sensitive information.

Network Architect

Average Annual Salary: Around $126,000
Required Education: Bachelor’s degree in network engineering or a related field; master’s in cybersecurity or a related field often preferred
Job Description: Network architects design and implement organizations’ security infrastructures. These professionals test and analyze existing safety structures to identify vulnerabilities and improvements. They install and maintain computer systems, including interconnected devices like firewalls and routers.

Before deploying any updates or upgrades, these information security professionals create models to test their networks in a controlled environment. Modeling allows network architects to forecast security and traffic issues before implementing their infrastructures in the real world. They also train and educate IT workers on organizational best practices.

Frequently Asked Questions About CISSP Requirements