What Is CCITP-A Certification?

What CCITP-A Actually Is

CCITP-A stands for Certified Counter-Insider Threat Professional - Analysis, a credential built for personnel who perform analytic work inside formal Insider Threat Programs. If you've seen the name "CITP-A" referenced elsewhere, that's not a different program - it's the renaming trajectory this same credential has been on, with CDSE materials increasingly referring to it as Certified Insider Threat Professional - Analysis. This article covers the CCITP-A certification specifically as administered under the counter-insider threat community, not any unrelated credential that happens to share the same four letters.

For readers who landed here after searching broader questions like what is CCITP-A, CCITP-A meaning, or what does CCITP-A stand for, the short version is: it's a government-recognized analysis-track credential sitting alongside a foundational tier, intended to validate that you can research, synthesize, and assess insider threat indicators using approved tools and methods.

Who Administers and Confers the Credential

CCITP-A is not issued by a private certifying body. It is jointly conferred by the Under Secretary of Defense for Intelligence and Security and the Director of the National Counterintelligence and Security Center. Day-to-day administration - handbooks, eligibility review, exam logistics - runs through the Defense Counterintelligence and Security Agency (DCSA), specifically the Center for Development of Security Excellence (CDSE) and the SPeD Program Management Office.

That structure matters for candidates: approval isn't a matter of paying a vendor and scheduling a test. Eligibility has to be reviewed and approved through DAU channels before you can even book a seat at a Pearson VUE test center. If you're unclear on how that approval chain works, the CCITP-A Requirements breakdown walks through the eligibility memorandum process in detail.

Exam Format, Delivery, and Question Style

The exam is delivered in person at Pearson VUE test centers. Per the CDSE tracker dated July 1, 2026, the exam contains 86 total questions - 80 scored plus 6 unscored pretest items that don't count toward your result but help validate future exam versions. The indexed official handbook specifies a 135-minute time limit and describes the question style as scenario-based multiple choice.

That scenario framing is the key difference from a typical recall-based certification exam. Questions tend to present a short situation - an anomalous access pattern, a behavioral observation, a policy conflict - and ask you to identify the correct analytic or procedural response rather than define a term in isolation. Details on whether the exam is open-book, uses a calculator, allows home proctoring, is adaptive, or what retake intervals apply are currently unverified in official sources, so don't assume any of those conditions without confirming through your program's eligibility channel.

The Six CCITP-A Exam Domains

CCITP-A content is organized into six domains. The weighting below reflects the most recently verified official breakdown (2024 AIRE material); a newer 2026 blueprint document was not independently obtainable, so treat the percentages as the best-confirmed figures rather than a freshly re-issued split.

Because the individual split between Domains 4 and 5 isn't published separately, don't try to memorize an exact percentage for either one alone - study them as a combined block. For a deeper walk-through of each domain with example topic lists, see the CCITP-A Exam Domains 2026 guide.

Eligibility and Prerequisites

CCITP-A isn't an open-enrollment exam. Candidates must satisfy a specific prerequisite stack before DAU approval is granted:

• Current CITP-F (the foundational tier) credential
• Current status as Insider Threat Program personnel
• At least 12 months of program experience
• 40 hours of analysis-related training
• 8 hours of UAM policy/tool training
• Review of 10 case studies
• Program-manager approval with a signed eligibility memorandum

No verified separate degree requirement or reference count exists beyond this list. Because this prerequisite chain is unusually procedural compared to most commercial certifications, it's worth reading the full CCITP-A Requirements article before you assume you qualify - missing one training hour requirement or case-study review can delay your eligibility memorandum.

Cost and Registration Mechanics

Here's a detail that surprises a lot of candidates researching this exam: the published, indexed official handbook lists no assessment fee - $0 for eligible candidates. There's no member/non-member pricing tier because membership isn't part of this credential's model at all. Your actual "cost" is the time investment in the prerequisite training and case-study review, plus whatever your organization requires administratively.

Registration itself runs through Pearson VUE, but only after your DAU eligibility approval is in place - you can't shop around for a seat before that approval precedes scheduling. For the full breakdown of what does and doesn't cost money around this certification, see CCITP-A Certification Cost 2026.

Passing Score and Pass Rate Data

The indexed handbook sets the passing threshold as a scaled score of 650 out of 800 - this is explicitly not the same as a raw 81.25% correct-answer requirement, since scaled scoring can weight items differently. A newly linked "combined handbook" that might clarify this further was inaccessible at time of research, so treat 650/800 as the confirmed standard. A full explanation of how scaled scoring works for this exam is available in CCITP-A Passing Score 2026.

On pass rates, the only verified official figures are: CY2025 - 21 of 39 assessments passed (53.85%), and June 2026 - 1 of 2 (50%). Neither figure is labeled as a first-attempt-only rate, and no full-year 2026 rate has been published yet. Treat these as small, assessment-count-based snapshots rather than a stable long-term benchmark - a deeper look at what these numbers do and don't tell you is in the CCITP-A Pass Rate 2026 article, and for context on perceived difficulty, see How Hard Is the CCITP-A Exam?.

Maintaining the Credential

Once earned, CCITP-A requires ongoing professional development to stay active. The current maintenance-page indexed text specifies 100 PDUs per two-year cycle, with at least 50 of those PDUs tied directly to Insider Threat-related content, all recorded through DAU. Older official material referenced a three-year cycle instead, so if you're already certified, confirm your individual expiry date and how the transition between the two cycle lengths was handled for your specific credential record - don't assume the newer two-year figure automatically overwrote an older three-year cycle without a formal notice.

Who Hires CCITP-A Holders

CCITP-A holders work inside formal Insider Threat Programs across federal agencies, DoD components, and cleared contractor organizations that operate under program-manager-approved structures. Because eligibility itself requires you to already be Insider Threat Program personnel with at least 12 months of program experience, this isn't typically an entry-point credential - it's a validation layer for analysts already embedded in the discipline, signaling that their research, synthesis, and tools proficiency has been formally assessed. If you're mapping out what roles value this credential and how it affects career trajectory, the CCITP-A Jobs page and the CCITP-A Salary Guide 2026 go into more detail, and the broader Is the CCITP-A Certification Worth It? analysis weighs the time investment against career benefit.

Mapping a Study Plan to the Blueprint

Rather than applying a generic study template, your prep time should mirror domain weight. Domains 4 and 5 jointly account for 35% of content - the largest published group - so they deserve the most sustained attention, while Domain 2 at only 10% should get comparatively lighter review.

For a complete week-by-week plan with recommended practice volume, read the CCITP-A Study Guide 2026. And since the exam leans heavily on scenario-based multiple choice rather than definition recall, running realistic practice questions on our CCITP-A practice test platform is one of the most direct ways to get comfortable with that question style before test day. If you want a condensed reference you can review in the final days before your exam, the CCITP-A Cheat Sheet 2026 consolidates the must-know facts covered here. Scheduling logistics, including how far in advance you can book at Pearson VUE once approved, are covered in CCITP-A Exam Dates 2026.

Finally, if you arrived here from a related search like what is a CCITP-A, what does CCITP-A mean, or you're building out general familiarity before committing to the prerequisite path, spending time on practice questions modeled on the real domain weighting is a faster way to gauge readiness than reading alone. Formal preparation resources, including CDSE-aligned coursework, are summarized in CCITP-A Training.

Frequently Asked Questions