Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.
810AdvancedHas prerequisites
Best Audit, Risk & Compliance Certifications in 2026
Audit, risk and compliance credentials cover internal audit, IT audit, technology risk, fraud examination and anti-money laundering. Choose the function you work in; each credential is built around one of them.
Validates knowledge of fraud schemes, financial transactions, investigation techniques, relevant law and fraud prevention and deterrence.
699IntermediateHas prerequisites
Validates knowledge of financial crime risks, global regulations, compliance program design, and tools for detecting and preventing crime.
2,470IntermediateHas prerequisites
Validates knowledge of internal audit fundamentals, ethics, engagement planning and performance, and managing the internal audit function.
1,515IntermediateHas prerequisites
Validates knowledge of US banking compliance, including consumer protection rules, BSA/AML requirements and compliance management systems.
815AdvancedHas prerequisites
Validates knowledge of IT risk governance, risk assessment, risk response and reporting, and technology controls.
810AdvancedHas prerequisites
Validates knowledge of running corporate compliance and ethics programs, including policies, oversight, training, monitoring, investigations and risk assessment.
450IntermediateHas prerequisites
How to choose a certification
Which certification fits your goal?
- Internal audit: CIA. The IIA's credential for internal auditors: three exams on internal audit practice, governance, risk and controls, plus one to five years of internal audit experience depending on your education.
- Information systems audit: CISA. ISACA's certification for IT audit, control and assurance. You can take the exam first, then apply with five years of relevant experience.
- Technology risk: CRISC. ISACA's certification for IT risk management: assessing, responding to and reporting on technology risk. You can take the exam first, then apply with three years of risk work.
- Fraud examination: CFE. The ACFE's credential covering fraud schemes, investigation, the law and fraud prevention. Certification requires 50 qualifying points, two years of fraud-related experience and ACFE membership.
- Anti-money laundering: CAMS. ACAMS's anti-money-laundering certification for compliance officers, KYC and AML analysts and investigators. You need 40 eligibility credits and an active ACAMS membership.
What to know before choosing
- Passing the exam and being certified can be separate steps. For CISA, CRISC and CFE you can pass the exam before you meet the experience requirement, then become certified once you apply with qualifying experience.
- Match the credential to the function. Auditing controls, managing technology risk, running a compliance program and investigating fraud are different jobs. Choose the credential for the one you do or want to do.