Certifies the ability to prepare a CISA Secure Software Development Attestation with proper executive accountability, scope and operate a FedRAMP High authorisation including its continuous monitoring obligations, and design a single evidence programme that serves both requirements.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
