What the vendors actually require

How hard is an IT certification?

Direct answer

What to do

There is no universal difficulty ranking. Start with the vendor's formal prerequisite and recommended background, then test whether you can perform the core work in a lab. This page has dated experience evidence for 147 certifications.

Prepare now when

  • The vendor-recommended foundations are already familiar in practice.
  • You can complete representative tasks without copying a walkthrough.
  • A diagnostic attempt identifies specific study gaps you can close.

Build foundations first when

  • Open registration is the only reason you think the exam is beginner-ready.
  • The basic vocabulary and practical tasks are still unfamiliar.
  • You are using a difficulty label as a substitute for testing readiness.

Reviewed 2026-08-26

Credential-specific decisions

Choose the exam you are considering

These pages turn the official scope and recommended background into practical prepare-now or build-foundations-first advice. They do not predict whether you will pass.

Is CompTIA A+ hard?

Judge whether two-exam breadth is manageable through device, operating-system, networking, security, and ticket work.

Open this decision →

Is CompTIA Network+ hard?

Use IP addressing, troubleshooting, device behavior, and hands-on tasks to decide whether the exam is manageable yet.

Open this decision →

Is CompTIA Security+ hard?

Check whether networking, systems, identity, logging, and security scenarios are familiar enough to begin exam-specific study.

Open this decision →

Is Cisco CCNA hard?

Use subnetting, routing, switching, configuration, and troubleshooting labs to decide whether CCNA is the right next step.

Open this decision →

Is AWS Cloud Practitioner hard?

Separate a foundational AWS vocabulary decision from the hands-on administration or architecture work you may actually need.

Open this decision →

Is CompTIA Linux+ hard?

Test command-line administration, security, automation, and troubleshooting before committing to exam-specific preparation.

Open this decision →

Is CompTIA PenTest+ hard?

Check networking, Linux, web, legal-scope lab, evidence, reporting, and remediation foundations before paying for preparation.

Open this decision →

Is CCNP Enterprise hard?

Start only when CCNA-level troubleshooting is routine and one concentration matches a real enterprise-networking gap.

Open this decision →

Is CISSP hard?

Start with the qualifying-experience gate, then test whether your judgment spans the credential’s broad security domains.

Open this decision →

Is ISC2 CC hard?

Use the no-experience entry point as a foundation decision, then pair the published scope with practical security work.

Open this decision →

Registration is open; the vendor also positions it as foundational (17)

Learnerside found both an open-registration or no-experience statement and the vendor’s own foundational positioning. That does not mean the exam is easy or that preparation is unnecessary.

CertificationVendorWhat we found on the vendor’s pageRead on
CC - Certified in CybersecurityISC2No prerequisite stated. source2026-08-23
Certified Associate in Project ManagementProject Management InstituteA secondary diploma (high-school or global equivalent) plus 23 contact hours of formal project-management education — no work experience and no prior certification required. source2026-06-14
Certified Cybersecurity Technician (CCT)EC-CouncilNo experience prerequisite stated on the official eligibility page. Candidate purchases the listed CCT exam voucher. source
Second route: No training-or-experience gate is stated on the official eligibility page.
2026-06-26
Cisco Certified Support Technician CybersecurityCiscoNo formal prerequisites. source2026-09-09
Cisco Certified Support Technician IT SupportCiscoNo formal prerequisites; candidates should understand the exam topics before taking it. source2026-07-04
Cisco Certified Support Technician NetworkingCiscoNo formal prerequisites. source2026-06-12
Cloud Digital LeaderGoogle CloudPrerequisites: None. source2026-06-26
Cloud FundamentalsISACANo prerequisite stated on page. source2026-06-26
Generative AI LeaderGoogle CloudNo prerequisite stated. source2026-06-26
IT Audit FundamentalsISACANo prerequisite stated on page. source2026-06-26
IT Risk FundamentalsISACANo prerequisite stated on page. source2026-06-26
ITIL 4 FoundationPeopleCertNo experience requirement stated. source2026-07-29
Microsoft Azure FundamentalsMicrosoftNone source2026-08-23
Microsoft Certified: Azure Data FundamentalsMicrosoftNo formal prerequisites; open registration. source2026-07-04
Microsoft Certified: Power Platform FundamentalsMicrosoftNo experience requirement stated. source2026-06-26
Microsoft Certified: Security, Compliance, and Identity FundamentalsMicrosoftNo formal prerequisites; open registration. source2026-07-04
Palo Alto Networks Certified Cybersecurity ApprenticePalo Alto NetworksNo formal prerequisite stated on the vendor page. source2026-07-30

These statements describe preparation or the intended audience, not a registration gate. A recommendation can still be useful: compare it with work and lab evidence you can already demonstrate.

CertificationVendorWhat we found on the vendor’s pageRead on
Associate Google Workspace AdministratorGoogle Cloud6 months of Google Workspace Super Admin experience in a real or test environment. Hands-on experience with Business Plus edition and knowledge of Enterprise Edition features and functionality. Certification renewal: Candidates may renew their certification source2026-06-08
AWS Certified AI PractitionerAmazon Web ServicesUp to 6 months of exposure to AI/ML technologies on AWS; familiarity with core AWS services and use cases, the shared responsibility model, IAM, and AWS service pricing. source2026-08-07
AWS Certified Cloud PractitionerAmazon Web ServicesUp to 6 months of exposure to AWS Cloud — explicitly not required; the exam targets candidates new to cloud who may not have an IT background. source2026-08-23
AWS Certified CloudOps Engineer - AssociateAmazon Web ServicesIndividuals with about one year of experience deploying, managing, and operating workloads on AWS; FAQ says one year with deployment, management, networking, and security on AWS. source2026-06-26
AWS Certified Data Engineer - AssociateAmazon Web ServicesIdeal candidate has the equivalent of 2-3 years of experience in data engineering or data architecture and a minimum of 1-2 years of hands-on experience with AWS services. source2026-06-26
AWS Certified Developer - AssociateAmazon Web ServicesOne or more years of prior hands-on experience developing and maintaining applications by using AWS services is recommended. source2026-06-26
AWS Certified DevOps Engineer - ProfessionalAmazon Web ServicesTwo or more years of experience provisioning, operating, and managing AWS environments is recommended for the target candidate. source2026-06-26
AWS Certified Generative AI Developer - ProfessionalAmazon Web ServicesTarget candidate should have two or more years building production-grade applications on AWS or with open-source technologies plus one year hands-on implementing generative AI solutions. source2026-06-26
AWS Certified Machine Learning Engineer - AssociateAmazon Web ServicesAt least one year of experience using Amazon SageMaker and other ML engineering AWS services; FAQ also states at least one year in ML engineering or related field and one year hands-on with AWS services. source2026-06-26
AWS Certified Security - SpecialtyAmazon Web ServicesIntended for experienced individuals with five years of IT security experience designing and implementing security solutions and two or more years hands-on securing AWS workloads. source2026-06-26
AWS Certified Solutions Architect - ProfessionalAmazon Web ServicesRecommended experience is two or more years using AWS services to design and implement cloud solutions. source2026-06-26
AWS Certified Solutions Architect AssociateAmazon Web ServicesAt least 1 year of hands-on experience designing AWS cloud solutions (the vendor's recommendation, not a requirement); candidates with 1–3 years of IT experience have earned it. source2026-08-23
CCDECiscoLearners are recommended to have five to seven years of experience with designing and architecting network solutions, as well as engaging in other related activities, such as pre-sales work. source2026-06-12
CCIE AutomationCiscoCisco states there are no formal prerequisites; learners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing the certification technology area. source2026-06-26
CCIE CollaborationCiscoCisco states there are no formal prerequisites; learners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing the certification technology area. source2026-06-26
CCIE Data CenterCiscoCisco states there are no formal prerequisites; learners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing the certification technology area. source2026-06-26
CCIE Enterprise InfrastructureCiscoCisco states there are no formal prerequisites; learners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing the certification technology area. source2026-06-26
CCIE SecurityCiscoLearners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing security technologies and solutions. source2026-06-12
CCIE Service ProviderCiscoCisco states there are no formal prerequisites; learners are recommended to have five to seven years of experience with designing, deploying, operating, and optimizing the certification technology area. source2026-06-26
CCIE WirelessCiscoLearners are recommended to have five to seven years of experience with designing, deploying, operating and optimizing enterprise wireless technologies and solutions prior to taking the exam. source2026-06-12
CCNP AutomationCiscoCisco states there are no formal prerequisites; learners often have three to five years of experience implementing solutions in the certification technology area. source2026-06-26
CCNP CollaborationCiscoCisco states there are no formal prerequisites; learners often have three to five years of experience implementing solutions in the certification technology area. source2026-06-26
CCNP CybersecurityCiscoCandidates often have three to five years of experience implementing enterprise networking solutions. source2026-06-12
CCNP Data CenterCiscoCisco states there are no formal prerequisites; learners often have three to five years of experience implementing solutions in the certification technology area. source2026-06-26
CCNP EnterpriseCiscoCisco states there are no formal prerequisites; learners often have three to five years of experience implementing enterprise network solutions. source2026-08-24
CCNP Service ProviderCiscoCisco states there are no formal prerequisites; learners often have three to five years of experience implementing solutions in the certification technology area. source2026-06-26
Certified System AdministratorServiceNowNo required experience or prerequisite stated. source2026-06-26
CompTIA A+CompTIACompTIA recommends 12 months of hands-on experience in an IT support specialist role (a recommendation, not a requirement). source2026-09-09
CompTIA Cloud+CompTIA2–3 years of hands-on experience as a systems administrator or cloud engineer (a vendor recommendation, not a requirement). source2026-06-19
CompTIA CloudNetXCompTIAat least 10 years of IT experience, including 5 years in a network architect role, with hybrid cloud environments and foundational knowledge equivalent to Network+, Security+, and Cloud+ (a vendor recommendation, not a requirement). source2026-06-19
CompTIA CySA+CompTIAAbout 4 years in a SOC analyst or vulnerability analyst role. source2026-08-23
CompTIA Data+CompTIA18–24 months in a data analyst or similar job role, with exposure to databases, analytical tools, basic statistics, and data visualization (a vendor recommendation, not a requirement). source2026-06-19
CompTIA DataAICompTIA5+ years in data science or a similar role (a vendor recommendation, not a requirement). source2026-06-19
CompTIA DataSys+CompTIAno prerequisites, with 2–3 years of experience in a database administrator role recommended (a vendor recommendation, not a requirement). source2026-06-19
CompTIA Linux+CompTIA12 months of hands-on experience with Linux servers; CompTIA A+, Network+, or Server+, or comparable knowledge is recommended. (a vendor recommendation, not a requirement). source2026-06-19
CompTIA Network+CompTIACompTIA recommends A+ plus 9–12 months of hands-on experience in a junior network-administrator or network-support-technician role (a recommendation, not a requirement). source2026-09-09
CompTIA PenTest+CompTIA3–4 years in a penetration tester job role, with Network+ and Security+ or equivalent knowledge (a vendor recommendation, not a requirement). source2026-08-23
CompTIA Project+CompTIAequivalent to 6–12 months of hands-on experience managing projects in a tech environment (a vendor recommendation, not a requirement). source2026-06-19
CompTIA Security+CompTIACompTIA recommends Network+ plus two years in a security or systems-administrator role (preparation guidance, not a registration requirement). source2026-09-09
CompTIA SecurityXCompTIAminimum of 10 years of general hands-on IT experience, including 5 years of hands-on security, with Network+, Security+, CySA+, Cloud+, and PenTest+ or equivalent knowledge (a vendor recommendation, not a requirement). source2026-06-19
CompTIA Server+CompTIACompTIA A+ certified or equivalent knowledge, with two years of hands-on experience in a server environment (a vendor recommendation, not a requirement). source2026-06-19
Databricks Certified Data Engineer ProfessionalDatabricksRelated course attendance and one year of hands-on experience in data engineering tasks outlined in the exam guide are highly recommended. source2026-06-26
Databricks Certified Machine Learning ProfessionalDatabricksCourse attendance and one year of hands-on Databricks experience are highly recommended. source2026-06-26
Fortinet NSE 4 - FortiOS 7.6 AdministratorFortinetNo required experience or prerequisite stated. 1–2 years of experience with networking; 0–1 year of experience with network security; Minimum of 6 months of hands-on experience with FortiGate source2026-06-26
Fortinet NSE 5 - FortiAnalyzer 7.6 AnalystFortinetA minimum of 6 months to 1 year of hands-on experience with FortiGate and FortiAnalyzer is recommended. source2026-06-26
Fortinet NSE 5 - FortiManager 7.6 AdministratorFortinetA minimum of 6 months to 1 year of hands-on experience with FortiGate and FortiManager is recommended. source2026-06-26
Fortinet NSE 5 - FortiWeb 8.0 AdministratorFortinet3 years of experience with networking; 1 year of experience with network security; A minimum of 6 months of hands-on experience with FortiWeb source2026-06-26
Fortinet NSE 6 - FortiMail 7.4 AdministratorFortinet3 years of experience with networking; 1 year of experience with network security; Minimum of 6 months of hands-on experience with FortiMail source2026-06-26
Fortinet NSE 6 - LAN Edge 7.6 ArchitectFortinet3 years of experience with networking (wireless and wired); 1 year of experience with network security; 1 year of experience with identity management and access control source2026-06-26
Fortinet NSE 6 - Network Security 7.6 Support EngineerFortinet3 years of experience with networking; 3 years of experience with network security; Minimum of 2 years of hands-on experience with FortiGate source2026-06-26
Fortinet NSE 6 - OT Security 7.6 ArchitectFortinetA minimum of 2 years of experience in design, implementation, and integration of the Fortinet solution in an OT infrastructure is recommended. source2026-06-26
Fortinet NSE 6 - SD-WAN 7.6 Enterprise AdministratorFortinet3 years of experience with networking; 3 years of experience with network security; 2 years of experience with FortiGate and FortiManager source2026-06-26
Fortinet NSE 7 - Enterprise Firewall 7.6 AdministratorFortinet3 years of experience with networking; 3 years of experience with network security; 2 years of experience with FortiGate, FortiManager, and FortiAnalyzer source2026-06-26
Fortinet NSE 7 - Public Cloud Security 7.6.4 ArchitectFortinet2 year of experience with Fortinet security solutions; 2 years of experience with AWS cloud; 2 years of experience with Azure cloud source2026-06-26
Fortinet NSE 7 - Security Operations 7.6 ArchitectFortinet1 year of experience with network security; 6 months of experience working in SOC source2026-06-26
GIAC Foundational Cybersecurity Technologies (GFACT)GIAC (SANS)No formal experience requirement found on the official GIAC certification page; GIAC certification attempts are activated after application approval and purchase. source2026-06-26
GIAC Information Security Fundamentals (GISF)GIAC (SANS)No formal experience requirement found on the official GIAC certification page; GIAC certification attempts are activated after application approval and purchase. source2026-06-26
GIAC Security Essentials (GSEC)GIAC (SANS)No formal experience requirement found on the official GIAC certification page; GIAC certification attempts are activated after application approval and purchase. source2026-06-26
Palo Alto Networks Certified Cloud Security EngineerPalo Alto NetworksVendor page states candidates have 3+ years in a cloud security-related field and 1-2 years with Palo Alto Networks cloud security solutions or Cortex platform and/or other CNAPP solutions. source2026-07-30
Palo Alto Networks Certified Network Security ArchitectPalo Alto NetworksVendor page states candidates have 5+ years of experience architecting for Zero Trust across the Network Security platform and 2+ years of Palo Alto Networks hands-on experience. source2026-07-30
Palo Alto Networks Certified Security Operations ArchitectPalo Alto NetworksVendor page states candidates have 5+ years of experience designing security operations incident response and threat detection/prevention solutions and 2+ years of Palo Alto Networks hands-on experience. source2026-07-30
PMI-PMOCP - PMI PMO Certified ProfessionalProject Management InstitutePMI certifications page states 3+ years of experience. source2026-06-26
Professional Cloud ArchitectGoogle Cloud3+ years of industry experience including 1+ years designing and managing solutions using Google Cloud source2026-06-08
Professional Cloud Database EngineerGoogle Cloud5+ years of overall database and IT experience, including 2 years of hands-on experience working with Google Cloud database solutions source2026-06-08
Professional Cloud DeveloperGoogle Cloud3+ years of industry experience including 1+ years designing and managing solutions using Google Cloud. source2026-06-08
Professional Cloud DevOps EngineerGoogle Cloud3+ years of industry experience including 1+ years designing and managing production systems using Google Cloud source2026-06-08
Professional Cloud Network EngineerGoogle Cloud3+ years of industry experience including 1+ years designing and managing solutions using Google Cloud source2026-06-08
Professional Cloud Security EngineerGoogle Cloud3+ years of industry experience including more than 1 year designing and managing solutions using Google Cloud source2026-06-08
Professional Data EngineerGoogle Cloud3+ years of industry experience including 1+ years designing and managing data solutions using Google Cloud. source2026-06-08
Professional Machine Learning EngineerGoogle Cloud3+ years of industry experience including 1 or more years designing and managing solutions using Google Cloud. source2026-06-08
Salesforce Certified Business AnalystSalesforceBusiness analyst who understands business needs, captures requirements, and collaborates with stakeholders on Salesforce solutions. source2026-06-26
Salesforce Certified Data Cloud ConsultantSalesforceConsultant with experience implementing and consulting on enterprise data platforms in a customer-facing role. source2026-06-26
Salesforce Certified Platform Administrator IISalesforceSeasoned Salesforce administrators who can apply advanced platform features to business problems. source2026-06-26
Salesforce Certified Platform DeveloperSalesforceDeveloper who understands custom business logic and interfaces on Lightning Platform and when to use declarative versus programmatic methods. source2026-06-26
Salesforce Certified Platform Developer IISalesforceExperienced Salesforce developer using advanced programmatic platform capabilities, data modeling, and complex business logic. source2026-06-26
Salesforce Certified Platform FoundationsSalesforceNo required experience or prerequisite stated. Designed for people with fundamental awareness of Salesforce as an integrated CRM platform and up to 6 months of Salesforce user experience. source2026-06-26
Salesforce Certified Sales Cloud ConsultantSalesforceConsultant trained to design and implement sustainable, scalable Sales Cloud solutions for customer success. source2026-06-26
Salesforce Certified Service Cloud ConsultantSalesforceConsultant who designs and implements scalable Service Cloud solutions meeting customer business requirements. source2026-06-26
SnowPro Advanced: AdministratorSnowflake2 or more years of hands-on experience with Snowflake as an Administrator in a production environment source2026-06-26
SnowPro Advanced: ArchitectSnowflake2 or more years of hands-on experience with Snowflake as an Architect in a production environment source2026-06-26
SnowPro Advanced: Data AnalystSnowflake1 or more years of hands-on practical experience with Snowflake as a Data Analyst in a production environment source2026-06-26
SnowPro Advanced: Data EngineerSnowflake2 or more years of hands-on experience as a Data Engineer in a production environment source2026-06-26
SnowPro Advanced: Data ScientistSnowflake2 or more years of hands-on experience with Snowflake as a Data Scientist in a production environment source2026-06-26
SnowPro Core CertificationSnowflake6 or more months of experience using Snowflake source2026-06-26
SnowPro Specialty: Gen AISnowflake1 or more years of Gen AI experience with Snowflake, in an enterprise environment source2026-06-26
SnowPro Specialty: SnowparkSnowflake1 or more years of hands-on Snowpark experience in a production environment source2026-06-26
Splunk Core Certified Power UserSplunkNo required experience or prerequisite stated. Entry-level baseline for users of Splunk Enterprise and Splunk Cloud; blueprint says no prerequisite exams. source2026-06-26
Splunk Core Certified UserSplunkNo required experience or prerequisite stated. Optional entry point for candidates with little to no Splunk experience or prior knowledge; no prerequisite exams or courses. source2026-06-26
Splunk O11y Cloud Certified Metrics UserSplunkNo required experience or prerequisite stated. Foundational exam for Splunk Observability Cloud users; blueprint says there are no prerequisite exams. source2026-06-26
VMware Certified Advanced Professional - Network Virtualization DeployVMware (Broadcom)1-2 years of relevant data center or virtualization experience is recommended; the minimally qualified candidate statement requires a VCP-NV certification. source2026-06-26
VMware Certified Advanced Professional - Network Virtualization DesignVMware (Broadcom)The VMware Certified Advanced Professional - Network Virtualization Design (VCAP-NV Design) certification verifies an individual's advanced skills in designing VMware NSX solutions, including network security, segmentation, and integration with other technologies. Job-roles associated with this certification include Network Virtualization architects and consultants. source2026-06-26
VMware Certified Advanced Professional - VMware Cloud Foundation AutomationVMware (Broadcom)The VMware Certified Advanced Professional – VCAP Administrator Automation certification validates the expertise required to support and troubleshoot private cloud environments built on VMware Cloud Foundation (VCF). Candidates for this certification are typically responsible for implementing, maintaining, and supporting VCF infrastructure to help their organizations meet service level objectives related to availability, performance, and security. Earning this certification demonstrates a professional’s ability to effectively diagnose and resolve issues within VCF-based private cloud environme source2026-06-26
VMware Certified Advanced Professional - VMware Cloud Foundation NetworkingVMware (Broadcom)The VMware Certified Advanced Professional – VCAP Administrator Networking certification validates a candidate’s ability to design, deploy, configure, manage, and troubleshoot VMware Cloud Foundation (VCF) Networking environments across enterprise and multi-cloud infrastructures. Successful candidates demonstrate a strong understanding of VCF Networking features, functions, and architecture, as well as integration with VMware vSphere. source2026-06-26
VMware Certified Advanced Professional - VMware Cloud Foundation StorageVMware (Broadcom)The VMware Certified Advanced Professional – VCAP Administrator Storage certification validates a candidate’s ability to design, configure, manage, and troubleshoot advanced storage capabilities in VMware Cloud Foundation (VCF) environments. This certification is intended for experienced architects, storage specialists, virtualization professionals, and systems administrators responsible for designing and operating resilient, secure, and high-performance storage in VMware Cloud Foundation (VCF) environments. source2026-06-26
VMware Certified Professional - VMware Avi Load Balancer AdministratorVMware (Broadcom)at least 3 months of hands-on product experience is recommended; the minimally qualified candidate has at least 3 months’ hands-on experience with VMware Avi Load Balancer. source2026-06-26
VMware Certified Professional - VMware Cloud Foundation AdministratorVMware (Broadcom)At least 1 year of IT experience is recommended; at least 6 months with the relevant VMware product/components is recommended; the minimally qualified candidate has the knowledge to install, configure, manage, and perform basic troubleshooting of a VMware Cloud Foundation (VCF) solution. source2026-06-26
VMware Certified Professional - VMware Cloud Foundation SupportVMware (Broadcom)The VMware Certified Professional - VMware Cloud Foundation Support (VCP-VCF Support) certification validates the skills required to support and troubleshoot private cloud environments built on VMware Cloud Foundation (VCF). This certification is designed for IT professionals expanding from existing support infrastructure roles and into cloud administration / Site Reliability Engineer (SRE) roles. Candidates for this certification include professionals responsible for implementing, maintaining and supporting VCF infrastructure in a way that contributes to an organization meeting service level source2026-06-26
VMware Certified Professional - VMware vSphere Foundation SupportVMware (Broadcom)The VMware Certified Professional - VMware vSphere Foundation Support(VCP-VVF support) certification validates a candidate's skills in standard troubleshooting techniques and methodologies to issues encountered during the deployment and operation of VMware vSphere Foundation (VVF). It confirms a high-level understanding of VVF, including its features, functions, components, and architectural models. Key components covered include VCF Operations, vCenter, VMware ESX, VMware vSAN, and VMware Operations for logs. source2026-06-26
VMware Telco Cloud NFV SkillsVMware (Broadcom)The minimally qualified candidate has 3 to 6 months hands-on experience with VMware Telco Cloud Infrastructure Cloud Director Edition. source2026-06-26
VMware Telco Cloud Platform Specialist SkillsVMware (Broadcom)The minimally qualified candidate has 3 to 6 months hands-on experience with VMware Telco Cloud Automation. source2026-06-26

Experience or another prerequisite is required (30)

These are eligibility conditions, not difficulty ratings. Read the full row and any second route: waivers, Associate status, education, or official training can change the path without erasing the requirement.

CertificationVendorWhat we found on the vendor’s pageRead on
AAIA - Advanced in AI AuditISACACandidates must hold CISA or another qualified designation with an IT audit or IT advisory role focus. source2026-06-26
AAIR - Advanced in AI RiskISACADesigned for risk professionals that hold: • An ISACA designation: CISA, CISM, CGEIT, CRISC, CDPSE • A non-ISACA designation: AACA, ACA, ANAN CNA, CA ANZ, Canadian CPA, CERP , CGMA, CGRC, CIA, CISSP , CPA HKICPA, CRCM, CRMA, CRMP , CRMP-FED, FCA, FCA ANZ, FCCA, FCPA HKICPA, Japanese CPA source2026-06-26
AAISM - Advanced in AI Security ManagementISACAProven experience in security or advisory roles, with some expertise assessing, implementing, and maintaining AI systems. source2026-06-26
CCSP - Certified Cloud Security ProfessionalISC2Must satisfy ISC2 certification work-experience requirements to become fully certified. source
Second route: Pass the exam to become an Associate of ISC2; CCSP Associate status can be held up to 6 years while you earn the 5 years of required experience before full certification. source
2026-07-07
CDPSE - Certified Data Privacy Solutions EngineerISACAA minimum of 3 years of cumulative work experience performing the tasks of a CDPSE professional is required; the experience must be gained within the 10 years preceding the certification application. source
Second route: Take the exam first; candidates have 5 years from the passing date to apply after meeting the experience requirement.
2026-06-25
Certified Application Security Engineer (CASE JAVA)EC-CouncilEC-Council's CASE .NET / Java eligibility table lists 2 years of information-security-related experience for the direct exam route; the eligibility process states applicants who do not attend training must have at least 2 years of work experience in the InfoSec domain. source
Second route: Attend official EC-Council CASE training through an Accredited Training Center, iClass, or approved academic institution; EC-Council also lists official courseware bundle purchase as eligible to attempt the exam.
2026-06-26
Certified Application Security Engineer (CASE.NET)EC-CouncilEC-Council's CASE .NET / Java eligibility table lists 2 years of information-security-related experience for the direct exam route; the eligibility process states applicants who do not attend training must have at least 2 years of work experience in the InfoSec domain. source
Second route: Attend official EC-Council CASE training through an Accredited Training Center, iClass, or approved academic institution; EC-Council also lists official courseware bundle purchase as eligible to attempt the exam.
2026-06-26
Certified Chief Information Security Officer (CCISO)EC-CouncilEC-Council lists 5 years of information-security experience across all domains for the no-training route: Governance, Risk, Compliance; Information Security Controls and Audit Management; Security Program Management and Operations; Information Security Core Competencies; and Strategic Planning, Finance, Procurement, and Third-Party Management. The page also states that candidates with official training must show experience in three of the five CCISO domains. source
Second route: Attend official CCISO training; even with training, EC-Council still requires the candidate to show experience in three out of the five CCISO domains before taking the CCISO exam and earning the certification.
2026-06-26
Certified Cloud Security Engineer (CCSE)EC-CouncilEC-Council lists 2 years of information-security-related experience for the CCSE direct exam route and states applicants who do not attend training must have a minimum of 2 years work experience in the InfoSec domain. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; official training makes the candidate eligible to attempt the exam.
2026-06-26
Certified Encryption Specialist (ECES)EC-CouncilDirect exam candidates need eligibility approval and a non-refundable application fee. Official courseware purchase is also listed as a route that makes the candidate eligible to attempt the exam. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; EC-Council also lists official courseware bundle purchase as eligible to attempt the exam.
2026-06-26
Certified Ethical Hacker (CEH)EC-CouncilEC-Council lists 2 years' experience across domains including information security and ethical hacking overview, reconnaissance, system hacking, network and perimeter hacking, web application hacking, wireless network hacking, mobile/IoT/OT hacking, cloud computing, and cryptography. Work experience is verified through references in the eligibility application. source
Second route: Attend official EC-Council training through an Accredited Training Center, EC-Council official online learning, or an approved academic institution; official training makes the candidate eligible to attempt the exam.
2026-06-26
Certified Incident Handler (ECIH)EC-CouncilEC-Council states the ECIH program requires 1 year of Information Security work experience unless the candidate attends official training. The exam-domain list includes incident response and handling, process handling, forensic readiness and first response, email security incidents, application-level incidents, network and mobile incidents, insider threats, malware incidents, and cloud-environment incidents. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; official training makes the candidate eligible to attempt the exam.
2026-06-26
Certified Network Defender (CND)EC-CouncilEC-Council states the CND program requires 2 years of work experience in the Information Security domain unless the candidate attends official training; self-study applicants submit an eligibility application and verifier details. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; official training makes the candidate eligible to attempt the relevant exam.
2026-06-26
Certified SOC Analyst (CSA)EC-CouncilEC-Council states the CSA program requires 1 year of work experience in the Network Admin/Security domain unless the candidate attends official training. The direct-exam path requires eligibility approval. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; EC-Council also lists official courseware bundle purchase as eligible to attempt the exam.
2026-06-26
Certified Threat Intelligence Analyst (CTIA)EC-CouncilEC-Council states the CTIA program requires 2 years of work experience in the Information Security domain unless the candidate attends official training. The direct-exam path requires eligibility approval and verifier-backed experience proof. source
Second route: Attend official EC-Council training through an Accredited Training Center, iClass, or approved academic institution; official training makes the candidate eligible to attempt the exam.
2026-06-26
CGEIT - Certified in the Governance of Enterprise ITISACAA minimum of 5 years of experience managing, advising on, overseeing, or otherwise supporting governance of the IT-related contribution to an enterprise is required; it must span at least three of four CGEIT domains, include at least 1 year in Domain 1, and fall within the 10 years preceding application. source
Second route: Take the exam first; candidates have 5 years from the passing date to apply after meeting the experience requirement.
2026-06-25
CGRC - Governance, Risk and Compliance CertificationISC2Must satisfy ISC2 certification work-experience requirements to become fully certified. source
Second route: Pass the exam to become an Associate of ISC2; CGRC Associate status can be held up to 3 years while you earn the 2 years of required experience before full certification. source
2026-07-07
CISA - Certified Information Systems AuditorISACA5 years of professional information-systems auditing, control, or security experience gained within the 10 years preceding application; up to 3 years are substitutable by education/other credentials, so at least ~2 years of real experience remain. source
Second route: Pass the exam first — you then have 5 years from the passing date to apply once you have the experience.
2026-08-08
CISM - Certified Information Security ManagerISACA5 years of information-security management experience across at least 3 of the 4 CISM domains are required for full CISM certification; you can take the exam before meeting the experience requirement. source
Second route: Pass the exam first — you then have 5 years from the passing date to apply once you have the management experience. There is no separate CISM Associate designation.
2026-08-08
CISSP - Certified Information Systems Security ProfessionalISC25 years of cumulative paid work experience in 2 or more of the 8 CISSP domains; qualifying part-time work and internships may count. ISC2 states that earning a post-secondary degree (bachelors or masters) in computer science, information technology (IT) or related fields may satisfy up to one year of the required experience, as may one additional credential from the ISC2 approved list, leaving a minimum of 4 years. source
Second route: Pass the exam to become an Associate of ISC2; you then have up to 6 years to earn the 5 years of required experience before the full CISSP is awarded. source
2026-07-26
Computer Hacking Forensic Investigator (CHFI)EC-CouncilEC-Council states the CHFI program requires 2 years of work experience in the Information Security domain unless the candidate attends official training; self-study applicants submit an eligibility application and verifier details. source
Second route: Attend official EC-Council training at an Accredited Training Center, via iClass, or through an approved academic institution; official training makes the candidate eligible to attempt the CHFI exam.
2026-06-26
CRISC - Certified in Risk and Information Systems ControlISACAA minimum of 3 years of professional information-systems auditing, control, or security work experience as described in the CRISC job-practice areas is required; the experience must be within the 10 years preceding the certification application. source
Second route: Take the exam first; candidates have 5 years from the passing date to apply after meeting the experience requirement.
2026-06-25
CSSLP - Certified Secure Software Lifecycle ProfessionalISC2Must satisfy ISC2 certification work-experience requirements to become fully certified. source
Second route: Pass the exam to become an Associate of ISC2; CSSLP Associate status can be held up to 5 years while you earn the 4 years of required experience before full certification. source
2026-07-07
ISSAP - Information Systems Security Architecture ProfessionalISC2ISC2 lists CISSP plus 2 years or 7 years cumulative experience for full ISSAP certification. source
Second route: Pass the exam to become an Associate of ISC2; ISSAP Associate status can be held up to 8 years while you earn the required experience before full certification. source
2026-07-07
ISSEP - Information Systems Security Engineering ProfessionalISC2ISC2 lists CISSP plus 2 years or 7 years cumulative experience for full ISSEP certification. source
Second route: Pass the exam to become an Associate of ISC2; ISSEP Associate status can be held up to 8 years while you earn the required experience before full certification. source
2026-07-07
ISSMP - Information Systems Security Management ProfessionalISC2ISC2 lists CISSP plus 2 years or 7 years cumulative experience for full ISSMP certification. source
Second route: Pass the exam to become an Associate of ISC2; ISSMP Associate status can be held up to 8 years while you earn the required experience before full certification. source
2026-07-07
PMI-ACP - PMI Agile Certified PractitionerProject Management InstituteHigh school or secondary diploma or higher; agile experience via one of several paths, including 2 years agile experience in the past 5 years, GAC degree plus 1 year, third-party agile certification plus 1 year, or PMP certification; 21 hours agile training. source2026-06-26
PMI-RMP - PMI Risk Management ProfessionalProject Management InstituteOne of PMI-RMP eligibility sets: 36 months/3 years risk management experience with secondary diploma, 24 months/2 years with bachelor degree or higher, or 12 months/1 year with GAC-accredited bachelor degree or higher; plus risk-management education hours. source2026-06-26
Project Management ProfessionalProject Management InstitutePMI lists four paths: secondary diploma plus 60 months/5 years; associate degree or vocational trade school diploma plus 48 months/4 years; bachelor degree or higher plus 36 months/3 years; or a PMI GAC-accredited bachelor or postgraduate degree plus 24 months/2 years. Project-management experience must be non-overlapping and within the prior 10 years. Meet the applicable education and project-management experience path plus 35 hours of project-management training or an active CAPM before applying. source
Second route: Active CAPM fulfills the PMP training requirement, not the project-management experience requirement.
2026-10-01
SSCP - Systems Security Certified PractitionerISC21 year of cumulative paid work experience in at least 1 of the 7 SSCP domains; qualifying part-time work and internships may count. A qualifying post-secondary degree can satisfy up to the full 1-year requirement. source
Second route: Pass the exam to become an Associate of ISC2; you then have up to 2 years to earn the 1 year of required experience before full certification. source
2026-07-26

Common questions

Do these groups rank credentials or predict passing?
No. They separate eligibility requirements from recommended preparation. Learnerside does not turn those facts into a quality ranking or a pass prediction.
Does no formal prerequisite mean beginner-ready?
No. Open registration says who may attempt an exam, not what preparation will make the attempt sensible. Learnerside only places a credential in the open-registration group when the vendor also positions it as foundational.
Why are some certifications missing?
Because we have not recorded a published statement from their vendor about required or recommended experience. Rather than guess from the product name, those certifications simply do not appear — which is why the length of this page is itself a statement about how much Learnerside has verified and recorded.

Where to go next

A certification’s own page carries this statement in context, along with whatever Learnerside has recorded about its exam format, its cost, and the roles it maps to. Browse the full index →