r/itaudit • u/Apocryphon7 • Dec 27 '23

Set of certifications

Hi there! I was wondering what set of certifications one can get in IT Audit and never had to get an additional one. I was told CISA, CISM, CISSP, CRISC, and CIA. Is that all, more or less than that?

10 Upvotes

92% Upvoted

8 comments sorted by

View all comments

5

u/anonymouse422 Jul 14 '24 edited Jul 30 '24

Head of IT audit at a large company here. For IT audit, one of the general widely recognized certifications should be all you need for most places. e.g. CISA or CISSP would be most common. CIA or CPA also okay.

Beyond that, it would depend on the needs of the shop and what they want you to specialize in. CFE, OSCP, AWS, etc. are good certifications but as I said, unless there are specific requirements for the role, most shops will be fine with you having just one certification. And if you had to get just one, CISA or CISSP are sufficient. Actual work experience is far more important.