Cybersecurity Analysis Certification (IIBA) and IREB Certified Professional for Requirements Engineering — Foundation (IREB) cover different bodies of knowledge. Here's how they compare side by side — and how to pick the one that fits your role.
The fastest way to see which credential fits your experience and goals.
| IIBA-CCACybersecurity Analysis Certification | CPRE FLIREB Certified Professional for Requirements Engineering — Foundation | |
|---|---|---|
| Level | Specialty · Cybersecurity | Foundation |
| Exam length | 2h 0m | 1h 15m |
| Questions (real exam) | ~75 | ~45 |
| Pass mark | 70% | 70% |
| In a sentence | The business analysis role in cybersecurity. | Requirements engineering, the vendor-neutral IREB way. |
| Free practice | 303 sample questions | 145 sample questions |
Exam parameters are compiled from each vendor's official exam guide. Always confirm the current format, eligibility and fees on the official IIBA and IREB site before booking. ExamDeck is an independent study tool and is not affiliated with IIBA or IREB.
Figures as published by each vendor, transcribed on the date shown. Where a vendor prices differently for members, both prices are listed.
| IIBA-CCAfacts as of August 2026 | CPRE FLfacts as of August 2026 | |
|---|---|---|
| Fees | Application fee: Not required Learning + Exam bundle: $395 member / $550 non-member Learning-only: $195 member / $250 non-member Exam rewrite: $195 member / $350 non-member Recertification: None — does not expire |
Exam fee: ~$120–315 / €110–290 — set per provider (verify at iSQI/Certible/GASQ) Student discount: 50% at iSQI on request Prerequisites / application fee: None Renewal: None — valid for life |
| Study time | around 25–45 hours (no official IIBA figure) | IREB's syllabus allocates ~18 hours of training (typically a 2–3 day course) plus self-study |
| Renewal | None — the CCA is a knowledge-based certificate and does not expire | None — CPRE Foundation Level is a one-time certification, valid for life |
| Entry requirement | No formal prerequisites — no required work experience, PD hours, or references. IIBA recommends roughly 2 years of work in the specialty area. | None — the official Examination Regulations state 'Examination prerequisites: none'. |
| Body of knowledge | IIBA's Cybersecurity Analysis guidance | the IREB CPRE Foundation Level syllabus |
| Full fact pages | IIBA-CCA cost · format · eligibility | CPRE FL cost · format · eligibility |
Compare the three-year cost of any two certifications, member or not, with the certification cost calculator.
Original, expert-reviewed questions with an explanation for every option. No dumps, no ads.
IIBA-CCA (Cybersecurity Analysis Certification) is a IIBA specialty · cybersecurity credential, while CPRE FL (IREB Certified Professional for Requirements Engineering — Foundation) comes from IREB (foundation). They cover different bodies of knowledge, so the choice depends on the role you're aiming for rather than difficulty alone.
The IIBA-CCA exam runs about 2h 0m with ~75 questions; the CPRE FL exam runs about 1h 15m with ~45 questions. The more senior credential generally demands more applied, scenario-based judgement.
Yes. A free account gets 6 sample questions in study mode for each of IIBA-CCA and CPRE FL, with an explanation for every option, plus a 10-question diagnostic for each. No credit card required.
Try IIBA-CCA or CPRE FL practice in study mode, with full explanations and sources. No card required.
Start free →