The CGEIT exam is the smaller hurdle. Five verified years in a governance oversight role, across three of the four domains, is the one ISACA checks afterwards. The whole route, domain by domain.
Ninety questions, 150 minutes, and a scaled 450 to pass. Before any of that, ISACA checks whether you already hold CISA or one of fifteen other designations, because AAIA is not a credential you can take cold.
ISACA built its name on exams you answer from a chair. This one hands you a terminal, a capture file and a scan result, and asks what they mean.
