Minimum 5 years of IS audit, assurance, control, and security experience is required to qualify for the CISA certification exam.