Exam Pathways
Prepare for the exam. Practice for the role.
Pathways for the certifications hiring managers ask for. Each one pairs a direction-finder, flashcards and a study plan with the practice that follows the exam. Preparation only: the exams belong to their owners, and the Association is not affiliated with any of them.
28pathways
9certification owners
6disciplines
7with full prep
10advanced and expert certifications, the ones senior roles screen on
The certification landscapeEvery pathway by discipline and level. Pick an owner to see theirs.
Security
Privacy
Risk
Compliance
AI governance
Trust & assurance
Expert
Advanced
Practitioner
Foundation
Full prep: flashcards, domain checks and readiness formsPractice availableOn hold
Certification owner
Showing 28 pathways. Full prep means flashcards, domain checks and readiness forms. Practice available means flashcards. On hold means we are waiting on something before writing more, and the pathway says what.
Full prep
CISSP
ISC2 · Advanced
Information systems security professional
150-item examStart →
Full prep
Security+
CompTIA · Foundation
Security foundations
90-item examStart →
Full prep
CISM
ISACA · Advanced
Information security management
150-item examStart →
Full prep
CISA
ISACA · Advanced
Information systems audit
150-item examStart →
Full prep
CRISC
ISACA · Advanced
IT risk and control
150-item examStart →
Full prep
CGRC
ISC2 · Practitioner
Governance, risk and compliance
125-item examStart →
Full prep
CCSP
ISC2 · Advanced
Cloud security professional
150-item examStart →
Practice available
ISO/IEC 27001 Lead Implementer
PECB · Practitioner
ISMS Lead Implementer
80-item examStart →
Practice available
ISO/IEC 27001 Lead Auditor
PECB · Practitioner
ISMS Lead Auditor
80-item examStart →
Practice available
ISO/IEC 42001 Lead Implementer
PECB · Practitioner
AI management system Lead Implementer
80-item examStart →
Practice available
ISO/IEC 42001 Lead Auditor
PECB · Practitioner
AI management system Lead Auditor
80-item examStart →
Practice available
CIPP/US
IAPP · Practitioner
US privacy law
90-item examStart →
Practice available
CIPP/E
IAPP · Practitioner
European data protection
90-item examStart →
Practice available
CIPM
IAPP · Practitioner
Privacy programme management
90-item examStart →
Practice available
AIGP
IAPP · Practitioner
AI governance
100-item examStart →
Practice available
AAISM
ISACA · Advanced
AI security management
90-item examStart →
Practice available
AAIA
ISACA · Advanced
AI audit
90-item examStart →
Practice available
CGEIT
ISACA · Advanced
Enterprise IT governance
150-item examStart →
Practice available
SecurityX
CompTIA · Expert
Advanced security practitioner
90-item examStart →
Practice available
PenTest+
CompTIA · Practitioner
Penetration testing
90-item examStart →
Practice available
AWS Certified Security – Specialty
Amazon Web Services · Advanced
Cloud security on AWS
65-item examStart →
Practice available
AWS Certified Cloud Practitioner
Amazon Web Services · Foundation
Cloud foundations on AWS
65-item examStart →
Practice available
AWS Certified AI Practitioner
Amazon Web Services · Foundation
AI foundations on AWS
65-item examStart →
Practice available
SC-900
Microsoft · Foundation
Security, compliance and identity fundamentals
160 cardsStart →
Practice available
AZ-900
Microsoft · Foundation
Azure fundamentals
160 cardsStart →
Practice available
ISO/IEC 27701 Lead Implementer
PECB · Practitioner
Privacy information management
80-item examStart →
Practice available
Open FAIR Foundation
The Open Group · Practitioner
Quantitative risk analysis
80-item examStart →
Practice available
ITIL 4 Foundation
PeopleCert (AXELOS) · Foundation
IT service management
40-item examStart →
Exam Pathways are independently authored by the Association and are not endorsed by the certification owners. They are never built from recalled or leaked exam content. Certification names are marks of their respective owners.