› Certifications · compare
Compare certifications
Pick up to 3 certifications and compare them side-by-side on cost, exam format, recertification, salary signal, quality, and domain coverage.
GIAC · professional
GCCCGIAC Critical Controls Certification
GIAC Critical Controls Certification
Official pageISACA · professional
CISACertified Information Systems Auditor
IS audit, governance, control testing, and assurance.
Official pageComparing
GIACGCCC
ISACACISA
› Cost
Exam fee
GCCC$979
CISA$760
Exam fee
$979
$760
Annual maintenance fee
GCCC—
CISA$45/yr
Annual maintenance fee
—
$45/yr
3-year cost of ownership
GCCC$979
CISA$895
3-year cost of ownership
$979
$895
› Exam mechanics
Pass mark
GCCC71% (scaled per attempt)
CISA450/800 (scaled)
Pass mark
71% (scaled per attempt)
450/800 (scaled)
Retake policy
GCCC$999 fee · 30d wait
CISA$575 fee · 30d wait · 4/yr cap
Retake policy
$999 fee · 30d wait
$575 fee · 30d wait · 4/yr cap
Study time
GCCC100–200 hrs
CISA120–250 hrs
Study time
100–200 hrs
120–250 hrs
Validity
GCCC4 yrs
CISA3 yrs
Validity
4 yrs
3 yrs
CPE / yr
GCCC9 CPEs
CISA40 CPEs
CPE / yr
9 CPEs
40 CPEs
Delivery
GCCCmixed
CISAtest center
Delivery
mixed
test center
› Salary signal (US base)
Range
GCCC$100K – $150K
CISA$100K – $150K
Range
$100K – $150K
$100K – $150K
Median
GCCC$120,000
CISA$122,000
Median
$120,000
$122,000
Premium %
GCCC—
CISA+9%
Premium %
—
+9%
Role context
GCCCSecurity control implementer / GRC engineer, US, 3-5 years.
CISAIT Auditor / SOX auditor / IS audit manager, US, 5+ years.
Role context
Security control implementer / GRC engineer, US, 3-5 years.
IT Auditor / SOX auditor / IS audit manager, US, 5+ years.
› Quality (4-axis rubric · 0–10)
Schema quality
GCCC7.5
CISA9.0
Schema quality
7.5
9.0
Practice evidence
GCCC4.5
CISA2.0
Practice evidence
4.5
2.0
Maintenance
GCCC7.0
CISA8.5
Maintenance
7.0
8.5
Market recognition
GCCC5.5
CISA9.0
Market recognition
5.5
9.0
Average
GCCC6.1
CISA7.1
Average
6.1
7.1
› Recognition & lifecycle
Recognition
GCCCGlobal
CISAGlobal · US · EU · UK · DACH
Recognition
Global
Global · US · EU · UK · DACH
ISO 17024 accredited
GCCC—
CISA✓
ISO 17024 accredited
—
✓
DoD 8140 baseline
GCCC—
CISA✓
DoD 8140 baseline
—
✓
Holders worldwide
GCCC—
CISA165,000
Holders worldwide
—
165,000
Current version
GCCCAligned to CIS Controls v8 (2023-06)
CISA2024 job-practice analysis (2024-06)
Current version
Aligned to CIS Controls v8 (2023-06)
2024 job-practice analysis (2024-06)
› Domain coverage
A1Governance, Risk & Compliance
GCCC● core
CISA● core
A1Governance, Risk & Compliance
● core
● core
A12Data Security, Privacy & Protection
GCCC·
CISA○ touched
A12Data Security, Privacy & Protection
·
○ touched
A13Supply Chain Security
GCCC·
CISA○ touched
A13Supply Chain Security
·
○ touched
A18Security Leadership
GCCC·
CISA○ touched
A18Security Leadership
·
○ touched
A25Security Architecture & Engineering
GCCC● core
CISA·
A25Security Architecture & Engineering
● core
·
Browse the full catalog or open any one of these on its detail page for full study materials, peer comparisons, and lifecycle notes.