CISSP, CISM, CISA and CRISC at a Glance
CISSP CISM CISA CRISC
Focus IT security and
cybersecurity
Information security Audit Risk management
Typical roles CIO
CISO
Security Director
Security Architect
Network Architect
Security Manager
Auditor
Analyst
Systems Engineer
Consultant
IT Director
InfoSec Manager
CIO
Enterprise Leadership
Risk Manager
IT Auditor
Consultant
Security Professional
Audit Manager
Non-IT Auditor
CIO
CISO
Security Director
Security Manager
System Engineer
Security Analyst
Security Manager
Security Auditor
Network Architect
Enterprise Leadership
Control Professional
Risk Professional
Business Analyst
Compliance Pro
Control and Assurance Pro
Domains Security and Risk
Management
Asset Security
Security Architecture
and Engineering
Communication and
Network Security
Identity and Access
Management (IAM)
Security Assessment
and Testing
Security Operations
Software Development
Security
InfoSec Governance
Risk Management
Security Program
Development and
Management
Security Incident
Management
Process of Auditing
Information Systems
IT Governance and
Management
InfoSec Acquisition,
Development and
Implementation
InfoSec Operations,
Maintenance and
Service Management
InfoSec Operations,
Maintenance, and
Service Management
Protection of
Information Assets
IT Risk Identification
Risk Assessment
Risk Response and Mitigation
Risk and Control Monitoring and
Reporting
Experience 5 years 5 years 5 years 3 years
Number of
exams
1 1 1 1
Exam fee $699 $575/Member
$760/Non-member
$575/Member
$760/Non-member
$575/Member
$760/Non-member
Annual fee $85 $45 members;
$85 non-members
$45 members;
$85 non-members
$45 members;
$85 non-members
Valid for 3 years 3 years 3 years 3 years
CPEs for
recertificatio
n
120 total; at least 40
each year
120 total; at least 20 per
year
120 total; at least 20
per year
120 total; at least 20 per year
Average
salary *
$109,965 $105,926 $97,117 $107,968
*All salary information obtained from the 2018 IT Skills and Salary Report by Global Knowledge
CISM
ISACA uses a 200-800 point scale with 450 as the passing mark for the exams. A scaled score is a conversion of the raw score on an exam to a
common scale. It is important to note that the exam score is not based on an arithmetic or percent average.
