Overview Certifications Blog Free Resources Pricing Success Stories

8 Globally Recognized Certifications

Find Your Certification Path

Explore AI-powered exam preparation for the most in-demand GRC certifications from IIA, ISACA, ACFE, and ISO. Each course features adaptive learning, unlimited practice exams, and personalized study plans.

Showing 10 certifications

CIA Part 1 — Essentials of Internal Auditing

CIA Part 1 is the foundation exam for the Certified Internal Auditor designation from the IIA. It covers the essentials of internal auditing: IIA Standards, independence, professional care, quality assurance, governance, risk, control, and fraud risks.

6 domains125 Qs2h 30m

Start Preparing

CIA Part 2 — Practice of Internal Auditing

CIA Part 2 focuses on the practical execution of an internal audit engagement: planning, information gathering, evaluation, supervision, and communication. It tests the auditor's ability to apply the IPPF to real-world engagements.

3 domains100 Qs2h

Start Preparing

CIA Part 3 — Business Knowledge for Internal Auditing

CIA Part 3 tests the business knowledge an internal auditor needs to evaluate organizational operations effectively: business acumen, information security, information technology, and financial management.

4 domains100 Qs2h 30m

Start Preparing

Certified Information Systems Auditor

CISA is the globally recognized standard for IS audit, control, and security professionals. Awarded by ISACA, it validates your ability to assess vulnerabilities, implement controls, and report on IT governance compliance.

5 domains150 Qs4h

Start Preparing

Certified Information Security Manager

CISM validates expertise in information security governance, program development, incident management, and risk management. It is designed for professionals who manage, design, and oversee enterprise information security programs.

4 domains150 Qs4h

Start Preparing

Certified in Risk and Information Systems Control

CRISC validates expertise in identifying, evaluating, and managing IT risk and designing, implementing, and maintaining IS controls. It uniquely bridges IT risk management with enterprise risk governance.

4 domains150 Qs4h

Start Preparing

Certified Fraud Examiner

The CFE is the gold standard in anti-fraud expertise, awarded by the Association of Certified Fraud Examiners. It demonstrates proficiency in fraud prevention, detection, investigation, and deterrence.

4 domains500 Qs10h

Start Preparing

ISO 31000PECB / ISO

ISO 31000 Risk Management Professional

ISO 31000 certification validates your understanding of international risk management principles, frameworks, and processes as defined by the ISO 31000 standard. Certifications are offered by accredited bodies such as PECB.

3 domains80 Qs2h

Start Preparing

ISO 27001PECB / IRCA

ISO/IEC 27001 Lead Auditor / Lead Implementer

ISO 27001 certification validates competence in auditing or implementing Information Security Management Systems (ISMS). Certifications are offered by PECB and CQI/IRCA, recognized globally in cybersecurity compliance.

4 domains80 Qs3h

Start Preparing

Certification in Risk Management Assurance

The CRMA is an advanced IIA credential for internal auditors who provide assurance on risk management processes. It validates expertise in evaluating ERM frameworks, risk governance, risk-based audit planning, and communicating risk assurance findings to boards and senior management.

3 domains120 Qs2h 30m

Start Preparing

Compare

Not Sure Which Certification?

Compare all eight certifications side-by-side to find the best fit for your experience, career goals, and schedule.

Certification	Issuer	Questions	Duration	Pass Score	Pass Rate	Study Hours	Cost
CIA Part 1 CIA Part 1 — Essentials of Internal Auditing	IIA	125	2h 30m	600 / 750 (scaled)	Approximately 44% (IIA global average)	120h	$295 (IIA member) — $425 (non-member), plus $115 / $230 one-time application fee
CIA Part 2 CIA Part 2 — Practice of Internal Auditing	IIA	100	2h	600 / 750 (scaled)	Approximately 48% (IIA global average)	110h	$265 (IIA member) — $395 (non-member)
CIA Part 3 CIA Part 3 — Business Knowledge for Internal Auditing	IIA	100	2h 30m	600 / 750 (scaled)	Approximately 56% (IIA global average)	120h	$265 (IIA member) — $395 (non-member)
CISA Certified Information Systems Auditor	ISACA	150	4h	450 / 800 (scaled; range 200–800)	Approximately 50–60% (ISACA does not publish official rates)	250h	$625 (ISACA member) — $810 (non-member)
CISM Certified Information Security Manager	ISACA	150	4h	450 / 800 (scaled; range 200–800)	Approximately 50–60% (ISACA does not publish official rates)	200h	$625 (ISACA member) — $810 (non-member)
CRISC Certified in Risk and Information Systems Control	ISACA	150	4h	450 / 800 (scaled; range 200–800)	Approximately 60–70% (ISACA does not publish official rates)	220h	$625 (ISACA member) — $810 (non-member)
CFE Certified Fraud Examiner	ACFE	500	10h	75% per section	Approximately 70–80%	180h	$480 (application + exam fee)
ISO 31000 ISO 31000 Risk Management Professional	PECB / ISO	80	2h	70% (varies by certifying body)	Approximately 65% (varies by certifying body)	120h	$400–$600 (exam fee; training courses are additional)
ISO 27001 ISO/IEC 27001 Lead Auditor / Lead Implementer	PECB / IRCA	80	3h	70% (PECB); varies for IRCA	Approximately 60–70% (varies by body and track)	160h	$500–$800 (exam fee; training courses $1,500–$3,000 additional)
CRMA Certification in Risk Management Assurance	IIA	120	2h 30m	600 / 750 (scaled)	Approximately 55% (IIA estimate)	100h	$395 (IIA member) — $495 (non-member)

Ready to Start Preparing?

Choose a certification and begin studying with AI-powered tools today. 7-day free trial, no credit card required.

Start Free Trial Talk to Sales

NexusGRC — AI-Native Governance, Risk & Compliance Platform