Certifications

ISACA CDPSE is the Certified Data Privacy Solutions Engineer certification for professionals who translate privacy requirements into systems, processes, and technical controls. The current exam structure was updated in 2025 and now covers four domains: privacy governance, privacy risk management and compliance, data life cycle management, and privacy engineering. That update makes the engineering emphasis especially visible, with privacy engineering carrying the largest domain weight. The ISACA CDPSE page sits within the wider ISACA certifications ecosystem. Candidates should not study it as a law-only privacy credential. ISACA CDPSE is about…

ISACA CGEIT is designed for professionals who govern enterprise information and technology rather than manage one technical function in isolation. The certification asks candidates to connect strategy, accountability, resources, investment value, performance, and risk at an enterprise level. That makes the exam less about memorizing control terms and more about deciding how technology should be directed, monitored, and evaluated in support of business objectives. The ISACA CGEIT page sits naturally inside the broader ISACA certifications ecosystem. Candidates should also understand the relationship with ISACA COBIT 2019, because COBIT provides governance…

ISACA CISA remains one of the core professional certifications for information-systems audit and assurance. The current exam contains 150 questions across five job-practice domains covering the audit process, governance and management of IT, systems acquisition and implementation, operations and business resilience, and protection of information assets. The breadth is intentional because modern auditors need to evaluate both technology controls and the business processes those controls support. The ISACA CISA exam page and the broader ISACA CISA certification page belong inside the wider ISACA certifications ecosystem. Candidates should study the exam…

ISACA CISM validates the management of enterprise information security rather than hands-on administration of individual security tools. The certification focuses on governance, risk management, security-program development and management, and incident management. Candidates are expected to choose actions that align security with business objectives, assign accountability, allocate resources, measure performance, and manage risk at a leadership level. The ISACA CISM exam page and the broader ISACA CISM certification page sit within the ISACA certifications ecosystem. A crucial 2026 detail is timing: ISACA has announced that the updated exam content outline takes…

ISACA COBIT 2019 Foundation introduces the concepts used to govern and manage enterprise information and technology as a coherent system. The current ISACA Foundation certificate is based on the COBIT 2019 framework and tests understanding of principles, governance-system components, governance and management objectives, design factors, implementation, performance management, and the business case for governance improvement. The ISACA COBIT 2019 page should be studied alongside the broader ISACA certifications ecosystem and the next-step COBIT Design & Implementation page. The Foundation level is not about memorizing objective codes. It is about understanding…

ISACA COBIT 2019 Design and Implementation builds on Foundation knowledge and moves from understanding the framework to tailoring and improving a governance system for a specific enterprise. ISACA identifies the Foundation certificate as the prerequisite for this path because candidates are expected to apply COBIT concepts rather than learn the framework structure for the first time. The COBIT Design & Implementation page should be studied with the prerequisite ISACA COBIT 2019 Foundation page and the broader ISACA certifications ecosystem. Current ISACA materials emphasize design factors, the governance-system design workflow, the…

ISM LEAD is the exam label associated with Leadership and Transformation in Supply Management, one of the examinations in the Certified Professional in Supply Management pathway. It focuses on business acumen, stakeholder engagement, people development, technology, risk, compliance, and corporate social responsibility rather than on transactional purchasing alone. Candidates should view it as the strategic and organizational portion of the broader CPSM body of knowledge. The ISM LEAD page sits within the ISM certifications ecosystem. Current timing matters because ISM is transitioning certification materials: its third-edition Leadership and Transformation exam…

ISACA COBIT 5 represents the previous major generation of the COBIT governance framework. ISACA still lists COBIT 5 certificate resources, and many organizations, professionals, audit records, and historical governance programs continue to reference the framework. At the same time, the current Foundation and Design and Implementation paths are built around COBIT 2019, so candidates should understand the version context before deciding what material is relevant to their goal. The ISACA COBIT 5 page is therefore best treated as a legacy-framework learning destination rather than the default starting point for someone…

ISACA CRISC validates the ability to identify, assess, respond to, and monitor information-systems risk in a business context. The current exam contains 150 questions across four domains: governance, risk assessment, risk response and reporting, and technology and security. The weighting emphasizes response and reporting most heavily, which reflects the credential’s focus on turning risk analysis into decisions, controls, ownership, and measurable action. The ISACA CRISC page belongs within the wider ISACA certifications ecosystem. The entry-level ISACA IT Risk Fundamentals certificate can provide useful foundational vocabulary, while ISACA CRISC expects deeper…

ISACA IT Risk Fundamentals is a current certificate for professionals who need a practical introduction to information and technology risk. It is intended for people new to risk, specialists who interact with risk teams, and organizations building common risk language. The exam has no prerequisite and uses both knowledge questions and performance-based tasks in a remotely proctored format. The ISACA IT Risk Fundamentals page sits naturally inside the broader ISACA certifications ecosystem and can serve as groundwork for the more advanced ISACA CRISC path. Current coverage spans risk introduction, governance…

The ISC2 CAP page belongs to an important historical certification lineage, but candidates should not treat the old name as a current credential. ISC2 renamed Certified Authorization Professional to Certified in Governance, Risk and Compliance in February 2023. The underlying discipline still centers on risk, controls, authorization, continuous monitoring, and governance, but the modern name reflects a broader GRC role than the original authorization-focused label suggested. That makes the ISC2 CAP destination most useful as a transition resource. Readers arriving through the legacy name should understand why it changed and…

CSA CCAK is the Certificate of Cloud Auditing Knowledge, created through the combined cloud-security expertise of the Cloud Security Alliance and the audit expertise of ISACA. The credential was designed to help auditors, security professionals, risk practitioners, and cloud stakeholders evaluate cloud environments where responsibility, evidence, control ownership, and assurance differ from traditional on-premises infrastructure. The CSA CCAK page requires a status note in late 2026. Cloud Security Alliance states that CSA CCAK stopped being available through the ISACA website in October 2025, while CSA still lists CSA CCAK within…

ICF ACC is the entry credential in the International Coaching Federation pathway, but the exam is not a generic test of motivational language. It evaluates whether a developing coach understands professional ethics, the boundaries of coaching, and the core behaviors that support a client-led coaching relationship. Preparation is strongest when candidates can apply those principles to situations rather than merely recite competency labels. The current ICF process places the written exam after the credential application has been reviewed and approved. The ICF ACC page should therefore be understood as one…

The Indiana Life Producer examination is an entry point into regulated insurance work, so preparation has to combine product knowledge with the responsibilities attached to selling and servicing life insurance in Indiana. Candidates need more than a list of policy definitions. They must understand how contracts are formed, how ownership and beneficiaries work, how premiums and values behave, and how state rules shape producer conduct. The Indiana Department of Insurance currently requires resident life applicants to complete the applicable pre-licensing education, pass the state examination, and complete the licensing application…

IFMA CFM is designed for experienced facility professionals, and that experience shows in the way the credential is framed. The examination spans the full facility-management body of knowledge rather than concentrating on maintenance alone. Candidates need to make decisions that connect operations, people, risk, technology, finance, property, projects, sustainability, and organizational strategy. IFMA currently describes the credential as a global standard for facility-management competence and bases the exam on eleven core competency areas. The IFMA CFM page fits naturally beside the broader IFMA credentials path, but candidates should use the…