- What You're Actually Paying For
- Base Exam Fee: Member vs. Non-Member Pricing
- Is the IIBA Membership Upgrade Worth It?
- The Optional Learning-and-Exam Package
- Retake Costs If You Don't Pass the First Time
- Hidden and Indirect Costs to Plan For
- Total Cost Scenarios Compared
- Why Domain Weighting Should Guide Your Study Spending
- The Long-Term Value: No Recertification Fees
- How to Keep Your Total Spend as Low as Possible
- Frequently Asked Questions
- The IIBA-CCA exam fee is $250 for members and $405 for non-members, with the non-member price including first-year IIBA membership.
- Retakes cost $195 (members) or $350 (non-members) - plan your first attempt seriously to avoid this.
- The optional learning-and-exam bundle runs $395 (members) or $550 (non-members) and is not required to sit the exam.
- Your purchased exam must be scheduled and completed within 6 months, so don't pay before you're ready.
What You're Actually Paying For
The Certificate in Cybersecurity Analysis (CCA), issued jointly by the International Institute of Business Analysis (IIBA) and the IEEE Computer Society under the official designation IIBA-CCA, has a pricing structure that is simpler than most technical certifications - but it still has moving parts that trip people up. There is a base exam fee, an optional bundled learning path, and a separate (cheaper) retake fee if your first attempt doesn't go your way.
Unlike credentials tied to renewal cycles, continuing education units, or annual maintenance dues, the IIBA-CCA is a one-time cost with no recertification requirement. That changes the entire cost calculus: what you pay to earn the credential is essentially what you'll ever pay for it. Before diving into the numbers, it helps to understand what each dollar actually buys - the exam itself, IIBA membership, and (optionally) structured coursework.
Base Exam Fee: Member vs. Non-Member Pricing
The core exam fee comes in two tiers:
- IIBA members: USD 250
- Non-members: USD 405 (this price includes your first year of IIBA membership)
That $155 gap isn't just an access fee - it's effectively the cost of a year of IIBA membership bundled in. If you already hold IIBA membership for other reasons (perhaps you're pursuing a business analysis credential alongside the CCA), the $250 member rate is the clear choice. If you're brand new to IIBA entirely, the $405 non-member price still gets you membership benefits for a year, which may offset some of the price difference depending on what those benefits are worth to you personally.
Either way, this fee covers a single attempt at the exam: 75 knowledge-based multiple-choice questions delivered in a 90-minute, remote-proctored session through PSI. There's no in-person testing center requirement, but the remote format has its own logistics - covered later in this article.
Is the IIBA Membership Upgrade Worth It?
Because the non-member exam fee already bakes in a year of membership, the real decision isn't "should I join IIBA" - it's already happening at $405. The actual comparison is:
| Path | Cost | What You Get |
|---|---|---|
| Already an IIBA member | $250 | Exam attempt only, using existing membership |
| New candidate, no membership | $405 | Exam attempt + first-year IIBA membership |
| Member retake | $195 | Second exam attempt at member rate |
| Non-member retake | $350 | Second exam attempt at non-member rate |
If you're only ever going to sit this one exam and have no interest in IIBA's broader business analysis certifications, the $155 premium simply buys you the ability to sit the exam at all as a non-member - it's not really optional. The math only gets interesting if you plan to pursue additional IIBA-affiliated credentials later, in which case an active membership pays for itself faster.
The Optional Learning-and-Exam Package
IIBA also offers a bundled option that combines structured coursework with the exam:
- Members: USD 395
- Non-members: USD 550
This package is explicitly optional - nothing in the eligibility rules requires you to complete a learning program before sitting the exam. It's worth noting that the learning program is organized into nine courses, which is a different structure from the eight examination domains the exam itself is graded against. Don't confuse the two when planning your study time or your budget; the courses map loosely to domain content but aren't a one-to-one substitute for domain-focused review.
Key Takeaway
Paying for the bundled learning package doesn't change what's tested. If you're confident in self-study, the exam-only fee saves $145-$145 depending on membership tier, and you can build your own domain-by-domain prep instead - see the CCA Study Guide 2026 for a self-directed approach.
Retake Costs If You Don't Pass the First Time
Results are reported strictly as pass/fail, with no scaled score. If your attempt doesn't result in a pass, retake pricing is meaningfully lower than the initial exam fee:
- Member retake: USD 195
- Non-member retake: USD 350
This is roughly a $55 discount off the original exam fee in both tiers - helpful, but not free. The smarter financial move is avoiding a retake altogether by going in prepared. Since the exam window closes 6 months after purchase, there's a real incentive to pace your study plan so you're not rushing an underprepared attempt just to avoid losing your purchase. For a candid read on where people commonly stumble, check How Hard Is the CCA Exam? Complete Difficulty Guide 2026 and CCA Pass Rate 2026: What the Data Shows.
Hidden and Indirect Costs to Plan For
Beyond the headline exam fee, a few practical items affect your effective cost and should be budgeted or planned around even though they don't appear on an invoice:
Remote Testing Environment Requirements
The exam is delivered via PSI's online proctoring system, which has strict technical requirements you must self-certify before test day.
- A compatible computer, functioning webcam, and microphone
- Valid identification for proctor verification
- A private, secure, distraction-free testing space
- No reference materials, calculator, or scheduled breaks allowed during the 90-minute session
If your current setup doesn't meet these requirements - say, a shared workspace with no privacy, or an unreliable webcam - the "hidden cost" is either upgrading equipment or renting a quiet, private space for exam day. It's a small line item, but overlooked webcam or environment issues are a common reason candidates have to reschedule, which wastes time against that 6-month window.
Another indirect cost is time itself: study hours have opportunity cost, and the depth of the eight-domain blueprint in the 2026 IIBA-CCA Handbook means most candidates need weeks, not days, of preparation. Budgeting time is as important as budgeting dollars.
Total Cost Scenarios Compared
Here's how total spend can look under a few realistic paths, assuming a candidate passes on either the first or second attempt:
| Scenario | Total Cost |
|---|---|
| Existing member, passes on first attempt | $250 |
| Non-member, passes on first attempt | $405 |
| Existing member, needs one retake | $445 ($250 + $195) |
| Non-member, needs one retake | $755 ($405 + $350) |
| Existing member, uses learning-and-exam package, passes first try | $395 |
| Non-member, uses learning-and-exam package, passes first try | $550 |
The single biggest lever in this table isn't the membership tier - it's whether you need a retake at all. Passing on the first attempt is worth more than any membership discount, which is exactly why solid domain-level preparation has an outsized return on your certification budget.
Why Domain Weighting Should Guide Your Study Spending
Since a retake costs real money, it makes sense to allocate study effort - and any paid resources like practice exams or courses - according to how heavily each domain is actually weighted on the exam. The eight domains are not equally weighted:
Highest-Weighted Domains (15% each)
Data Security and User Access Control are tied as the largest domains on the exam. Together they account for nearly a third of all scored questions.
- Data classification, protection mechanisms, and lifecycle handling
- Identity, authentication, authorization, and access governance concepts
Mid-Weighted Domains (12-14% each)
Cybersecurity Overview and Basic Concepts (14%), Enterprise Risk (14%), Cybersecurity Risks and Controls (12%), Solution Delivery (13%), and Operations (12%) round out most of the remaining exam.
- Foundational terminology and risk frameworks appear early and often
- Solution delivery and operations questions test applied, scenario-based judgment
Lightest-Weighted Domain (5%)
Securing the Layers is the smallest domain by far - worth understanding, but not where you should overspend limited study time or paid resources.
If you're deciding where to invest paid study materials versus free review, prioritize Data Security and User Access Control first, since they represent your highest-leverage dollars per hour studied. A full domain-by-domain breakdown with study allocation guidance is available in CCA Exam Domains 2026: Complete Guide to All 8 Content Areas.
The Long-Term Value: No Recertification Fees
One factor that meaningfully changes the CCA's total cost-of-ownership compared to many other certifications: the certificate does not expire and requires no recertification or continuing development units (CDUs). Once you pass, there's no annual renewal fee, no periodic re-exam, and no ongoing CDU tracking to maintain active status.
This matters when comparing the CCA's price against certifications that look cheaper up front but charge annual maintenance fees indefinitely. Over a five- or ten-year career horizon, a one-time $250-$405 investment with zero recurring cost can work out to a lower total cost than a credential with a smaller initial fee but yearly renewal charges. For a broader discussion of whether that investment pays off relative to career impact, see Is the CCA Certification Worth It? Complete ROI Analysis 2026 and CCA Salary Guide 2026: Complete Earnings Analysis.
How to Keep Your Total Spend as Low as Possible
Given the fee structure above, the most cost-effective path through the CCA generally follows a predictable pattern:
Foundational Domains
- Cybersecurity Overview and Basic Concepts, Enterprise Risk
- Confirm your eligibility and registration details before paying - see CCA Requirements 2026
Heaviest-Weighted Domains
- Data Security and User Access Control (15% each)
- Spend any paid resources here first for maximum return
Applied Domains
- Solution Delivery, Operations, Cybersecurity Risks and Controls
- Practice scenario-based question formats
Light Domain + Full Review
- Securing the Layers (5%) plus a full-length timed practice run
- Verify remote-proctoring tech requirements ahead of scheduling
Only purchase your exam attempt once you're within striking distance of ready - remember the 6-month completion window starts at purchase, not at scheduling. Run a full practice test under timed, 90-minute conditions on our CCA practice test platform before you commit to a date, so you're not gambling a $250-$405 fee on an unknown. If you want a condensed reference for the final stretch, the CCA Cheat Sheet 2026 is built for exactly that last-week review.
For candidates who are still deciding whether this credential fits their career path at all, it's worth reading a plain overview first - What Is CCA Certification? and CCA Jobs both cover who typically pursues this and why, before you spend a dollar.
Frequently Asked Questions
The lowest total cost is $250 if you're already an IIBA member and pass the exam-only option on your first attempt. Non-members pay $405, which includes a first year of IIBA membership.
No. The learning program is explicitly optional. You can register for the exam alone at $250 (members) or $405 (non-members) without purchasing any coursework.
Yes. Retakes cost $195 for members and $350 for non-members, both lower than the original exam fee, though still a real added cost worth avoiding through solid preparation.
No. The IIBA-CCA certificate does not expire and has no recertification requirement or continuing development units, so there are no renewal fees after your initial pass.
Yes. Once you purchase your exam, you must complete it within 6 months, so it's wise to pay only when you're close to exam-ready rather than far in advance.