Both come from IIBA — but they target different roles and career stages. Here's how Certified Business Analysis Professional and Cybersecurity Analysis Certification compare, and how to choose.
The fastest way to see which credential fits your experience and goals.
| CBAP®Certified Business Analysis Professional | IIBA-CCACybersecurity Analysis Certification | |
|---|---|---|
| Level | Senior | Specialty · Cybersecurity |
| Exam length | 3h 30m | 2h 0m |
| Questions (real exam) | ~120 | ~75 |
| Pass mark | 70% | 70% |
| In a sentence | The senior-level BABOK certification. | The business analysis role in cybersecurity. |
| Free practice | 253 sample questions | 303 sample questions |
Exam parameters are compiled from each vendor's official exam guide. Always confirm the current format, eligibility and fees on the official IIBA site before booking. ExamDeck is an independent study tool and is not affiliated with IIBA.
Figures as published by each vendor, transcribed on the date shown. Where a vendor prices differently for members, both prices are listed.
| CBAP®facts as of August 2026 | IIBA-CCAfacts as of August 2026 | |
|---|---|---|
| Fees | Application fee (one-time, non-refundable): $145 Exam fee — IIBA member: $350 (first-year membership included) Exam fee — non-member: $505 Retake — member: $295 Recertification (every 3 yrs): $85 member / $120 non-member |
Application fee: Not required Learning + Exam bundle: $395 member / $550 non-member Learning-only: $195 member / $250 non-member Exam rewrite: $195 member / $350 non-member Recertification: None — does not expire |
| Study time | 150–200 hours over 2–3 months (roughly 5–8 hours a week) | around 25–45 hours (no official IIBA figure) |
| Renewal | 60 Continuing Development Units (CDUs) every 3 years | None — the CCA is a knowledge-based certificate and does not expire |
| Entry requirement | 7,500 hours of BA work in the last 10 years | No formal prerequisites — no required work experience, PD hours, or references. IIBA recommends roughly 2 years of work in the specialty area. |
| Body of knowledge | BABOK v3 | IIBA's Cybersecurity Analysis guidance |
| Full fact pages | CBAP® cost · format · eligibility | IIBA-CCA cost · format · eligibility |
Compare the three-year cost of any two certifications, member or not, with the certification cost calculator.
Original, expert-reviewed questions with an explanation for every option. No dumps, no ads.
Both come from IIBA. CBAP® (Certified Business Analysis Professional) is a Senior credential, while IIBA-CCA (Cybersecurity Analysis Certification) is a Specialty · Cybersecurity credential. They differ mainly in target role, exam length and depth.
The CBAP® exam runs about 3h 30m with ~120 questions; the IIBA-CCA exam runs about 2h 0m with ~75 questions. The more senior credential generally demands more applied, scenario-based judgement.
Yes. ExamDeck offers free sample questions in full study mode for both CBAP® and IIBA-CCA, with an explanation for every option. No credit card required.
Try CBAP® or IIBA-CCA practice in study mode, with full explanations and sources. No card required.
Start free →