Cybersecurity Analysis Certification (IIBA) and AgileBA Foundation (APMG) (APMG) cover different bodies of knowledge. Here's how they compare side by side — and how to pick the one that fits your role.
The fastest way to see which credential fits your experience and goals.
| IIBA-CCACybersecurity Analysis Certification | AgileBA Found.AgileBA Foundation (APMG) | |
|---|---|---|
| Level | Specialty · Cybersecurity | Foundation |
| Exam length | 2h 0m | 0h 40m |
| Questions (real exam) | ~75 | ~50 |
| Pass mark | 70% | 50% |
| In a sentence | The business analysis role in cybersecurity. | Business analysis the agile way — DSDM framework. |
| Free practice | 303 sample questions | 150 sample questions |
Exam parameters are compiled from each vendor's official exam guide. Always confirm the current format, eligibility and fees on the official IIBA and APMG site before booking. ExamDeck is an independent study tool and is not affiliated with IIBA or APMG.
Figures as published by each vendor, transcribed on the date shown. Where a vendor prices differently for members, both prices are listed.
| IIBA-CCAfacts as of August 2026 | AgileBA Found.facts as of August 2026 | |
|---|---|---|
| Fees | Application fee: Not required Learning + Exam bundle: $395 member / $550 non-member Learning-only: $195 member / $250 non-member Exam rewrite: $195 member / $350 non-member Recertification: None — does not expire |
Exam fee: ~£150–300 / $200–350 — set by ATO/APMG portal (verify) Prerequisites: None Renewal: None — Foundation does not expire |
| Study time | around 25–45 hours (no official IIBA figure) | a 3-day course (~18–24 contact hours) or roughly 10–16 hours of self-study with the handbook |
| Renewal | None — the CCA is a knowledge-based certificate and does not expire | None — Foundation does not expire (Practitioner level is valid 5 years) |
| Entry requirement | No formal prerequisites — no required work experience, PD hours, or references. IIBA recommends roughly 2 years of work in the specialty area. | None — open to anyone; no prior agile or BA certification required. |
| Body of knowledge | IIBA's Cybersecurity Analysis guidance | the AgileBA Handbook (Agile Business Consortium) |
| Full fact pages | IIBA-CCA cost · format · eligibility | AgileBA Found. cost · format · eligibility |
Compare the three-year cost of any two certifications, member or not, with the certification cost calculator.
Original, expert-reviewed questions with an explanation for every option. No dumps, no ads.
IIBA-CCA (Cybersecurity Analysis Certification) is a IIBA specialty · cybersecurity credential, while AgileBA Found. (AgileBA Foundation (APMG)) comes from APMG (foundation). They cover different bodies of knowledge, so the choice depends on the role you're aiming for rather than difficulty alone.
The IIBA-CCA exam runs about 2h 0m with ~75 questions; the AgileBA Found. exam runs about 0h 40m with ~50 questions. The more senior credential generally demands more applied, scenario-based judgement.
Yes. A free account gets 6 sample questions in study mode for each of IIBA-CCA and AgileBA Found., with an explanation for every option, plus a 10-question diagnostic for each. No credit card required.
Try IIBA-CCA or AgileBA Found. practice in study mode, with full explanations and sources. No card required.
Start free →