Cybersecurity Analysis Certification (IIBA) and PMI Professional in Business Analysis (PMI) cover different bodies of knowledge. Here's how they compare side by side — and how to pick the one that fits your role.
The fastest way to see which credential fits your experience and goals.
| IIBA-CCACybersecurity Analysis Certification | PMI-PBA®PMI Professional in Business Analysis | |
|---|---|---|
| Level | Specialty · Cybersecurity | Professional |
| Exam length | 2h 0m | 4h 0m |
| Questions (real exam) | ~75 | ~200 |
| Pass mark | 70% | 70% |
| In a sentence | The business analysis role in cybersecurity. | Business analysis in projects — PMI's BA credential. |
| Free practice | 303 sample questions | 297 sample questions |
Exam parameters are compiled from each vendor's official exam guide. Always confirm the current format, eligibility and fees on the official IIBA and PMI site before booking. ExamDeck is an independent study tool and is not affiliated with IIBA or PMI.
Figures as published by each vendor, transcribed on the date shown. Where a vendor prices differently for members, both prices are listed.
| IIBA-CCAfacts as of August 2026 | PMI-PBA®facts as of August 2026 | |
|---|---|---|
| Fees | Application fee: Not required Learning + Exam bundle: $395 member / $550 non-member Learning-only: $195 member / $250 non-member Exam rewrite: $195 member / $350 non-member Recertification: None — does not expire |
Exam fee — PMI member: ~$405 (verify on pmi.org) Exam fee — non-member: ~$555 (verify on pmi.org) PMI membership (optional): $129/yr + $10 one-time Renewal (every 3 yrs): 60 PDUs under the CCR program |
| Study time | around 25–45 hours (no official IIBA figure) | commonly reported 80–120 hours depending on BA experience |
| Renewal | None — the CCA is a knowledge-based certificate and does not expire | 60 PDUs every 3 years under PMI's CCR program |
| Entry requirement | No formal prerequisites — no required work experience, PD hours, or references. IIBA recommends roughly 2 years of work in the specialty area. | Secondary degree: 60 months of business analysis experience (last 8 years) + 35 contact hours of BA education, |
| Body of knowledge | IIBA's Cybersecurity Analysis guidance | the official PMI-PBA Examination Content Outline |
| Full fact pages | IIBA-CCA cost · format · eligibility | PMI-PBA® cost · format · eligibility |
Compare the three-year cost of any two certifications, member or not, with the certification cost calculator.
Original, expert-reviewed questions with an explanation for every option. No dumps, no ads.
IIBA-CCA (Cybersecurity Analysis Certification) is a IIBA specialty · cybersecurity credential, while PMI-PBA® (PMI Professional in Business Analysis) comes from PMI (professional). They cover different bodies of knowledge, so the choice depends on the role you're aiming for rather than difficulty alone.
The IIBA-CCA exam runs about 2h 0m with ~75 questions; the PMI-PBA® exam runs about 4h 0m with ~200 questions. The more senior credential generally demands more applied, scenario-based judgement.
Yes. A free account gets 6 sample questions in study mode for each of IIBA-CCA and PMI-PBA®, with an explanation for every option, plus a 10-question diagnostic for each. No credit card required.
Try IIBA-CCA or PMI-PBA® practice in study mode, with full explanations and sources. No card required.
Start free →