FITSP-Auditor logo
Focused certification exam prep
Start practice

FITSP-Auditor Exam Dates 2026: Testing Windows, Deadlines & Scheduling

TL;DR
  • FITSI's current Auditor route is remote-proctored; in-person testing is labeled "Currently Not Offered" on its registration page.
  • Check in 30 minutes early; the exam is 150 questions in three hours with no scheduled breaks.
  • Rescheduling costs US$100, so lock your date only after practice scores in the heavily weighted domains are stable.
  • Passing the exam is not certification: you have five years to submit your application, resume and two endorsements.

Why FITSP-Auditor Has No Fixed Exam Calendar

Searching for "FITSP-Auditor exam dates 2026" tends to turn up pages that read like a quarterly testing calendar. The reality is different. The Federal IT Security Institute (FITSI), which administers the Federal IT Security Professional program, administers and proctors the examination itself. No third-party testing network such as Pearson VUE, PSI or Prometric was identified as the provider, which means there is no public search box where you pick from a grid of open seats at local test centers.

Older FITSI material referred to quarterly appointment windows, and some of those pages still circulate. Treat them as historical. A 2020-era appointment schedule tells you how the program once operated, not what is available to you today. The reliable way to establish a date is to work through FITSI's own registration and remote-proctoring pages and confirm what is offered at the moment you register.

What this means for planning: Because the date is arranged through FITSI rather than pulled from a fixed national calendar, your "exam date" is something you set through the registration process. That puts the timing largely in your hands, which is good news for preparation but also means no external deadline will force you to finish studying.

Delivery Formats: Remote Proctoring vs. In-Person

FITSI's FITSP Exam Registration page describes two delivery formats, but it explicitly labels in-person testing "Currently Not Offered," and it retains pandemic-era wording around that status. The Candidate Handbook still describes in-person procedures, yet describing a procedure is not the same as offering appointments. Do not build a plan around an in-person seat unless FITSI confirms one directly.

The route that is actually available is remote-proctored testing, and FITSI's FITSP Remote-Proctored Testing page supplies the Auditor registration path and process. Understanding the format matters for scheduling because your date has to coincide with a period when you can meet the technical and environmental requirements.

ItemWhat FITSI documents
In-person testingLabeled "Currently Not Offered" on the registration page
Remote-proctored testingThe documented route for Auditor registration
ComputerYour own computer, plus a separate phone or tablet for monitoring
Platform toolsAssess.ai, WebLock and Zoom, per Candidate Handbook v3.7
IdentificationTwo signed IDs, including one photo ID
Check-in30 minutes before your start time
LanguageEnglish only

How Scheduling Works Step by Step

The sequence below reflects what FITSI publishes. Always confirm current steps on FITSI's pages before paying, since procedures and forms are revised periodically.

  1. Confirm your role. Make sure you are registering for the Auditor examination. FITSI also runs Designer, Manager and Operator scopes, and each has its own domain weighting. Registering for the wrong role is an avoidable and costly mistake.
  2. Review eligibility for the certification, not just the exam. The certification requires five years of information-security experience in federal or civilian employment, with limited waivers for degrees and complementary certifications. That experience is assessed after you pass, but you should know where you stand first. See our FITSP-Auditor requirements guide for the full waiver rules.
  3. Register through FITSI's remote-proctored route. The initial examination fee is US$395. Membership is not required, and no separate member and nonmember exam price is published.
  4. Prepare your testing setup. Verify your computer, your second monitoring device, your two IDs and your room before exam day.
  5. Test on your date. Log in 30 minutes early for check-in. Results are shown immediately as pass or fail.

Key Takeaway

If any part of the process is unclear, such as an available time slot or a form version, ask FITSI directly before paying. A US$100 rescheduling fee makes a wrong assumption expensive.

Fees That Affect Your Date: Registration, Rescheduling and Retests

Dates and money are linked in this program, because moving or repeating an attempt carries fixed fees from FITSI's fee schedule. These are the figures that bear on timing:

FeeAmountWhy it matters for dates
Initial examinationUS$395The baseline cost of your first attempt
ReschedulingUS$100Moving your date costs real money; plan before you commit
Eligible same-role retestUS$197.50Discounted, but only inside the retest window
Annual maintenanceUS$75Applies once you hold the certification
Incomplete-application processingUS$25Submit a complete application to avoid it

The retest window

The Candidate Handbook allows one discounted retest after a failed exam. You must wait 21 calendar days, and the retest must fall within one year of your initial examination. Outside that allowance, the initial rate applies. In practice, this means a failed first attempt gives you a defined timeframe in which a second sitting is cheaper, so build your recovery plan around those two constraints rather than rebooking impulsively. For a fuller price breakdown, including optional training and vouchers, read our FITSP-Auditor certification cost guide.

What Your Exam-Day Window Actually Looks Like

When you choose a date, you are really choosing a roughly three-and-a-half hour block once check-in is included. The examination itself is computer-based, with 150 multiple-choice questions: 120 scored items and 30 beta items, under a three-hour limit. You will not be told which items are beta.

  • Closed book. Reference materials, papers and calculators must be put away. The platform's digital Notepad is permitted.
  • Continuous monitoring. Monitoring runs throughout the sitting via your second device.
  • No scheduled breaks. Necessary bathroom breaks do not pause or extend the three-hour clock, so schedule a time when you will not be interrupted and plan hydration accordingly.
  • Results. Pass/fail appears immediately, followed by an emailed score report in three to five business days.

That math, 150 questions in 180 minutes, works out to roughly 72 seconds per item. Because many Auditor questions turn on recalling specific control families, standards or legal requirements, a time of day when you are sharp matters more than most candidates assume. Our difficulty guide explains where candidates tend to lose time.

Passing mark note: FITSI's Auditor scheme sets its cut score through an Angoff study with psychometrician and subject-matter-expert input, approved by the Scheme Committee. A current numerical Auditor passing mark was not publicly verified, so do not trust any site that quotes an exact figure. See what is and is not known about the passing score.

The Deadlines That Start After You Pass

Many candidates focus entirely on the exam date and overlook that the clock keeps running afterward. Passing the examination alone does not award the credential. FITSI evaluates your experience evidence after the exam, and several deadlines follow.

  1. Application submission. After you pass, you submit a complete application, a current resume or CV, and two professional third-party endorsements verifying your experience, and you agree to the FITSI Code of Ethics. You have five years after passing to submit these documents.
  2. Review period. FITSI describes an assessment and decision process of up to 60 days for a complete submission.
  3. Form version. The current Candidate Handbook and Requirements page refer to a 17-page application, while an older scheme document says 15. Use the current application rather than treating the older count as controlling.
  4. Renewal cycle. The certification is valid for three years. You earn and report 60 CPE credits per held certification in each cycle, or retake the applicable examination, while maintaining annual fees and Code of Ethics compliance.

Notice how long the post-exam runway is compared with the exam itself: up to five years to apply, then up to 60 days for a decision. The practical takeaway is to gather endorsements early. If you take the exam while still short of the experience requirement, the five-year window gives you room, but your endorsers' availability and your documentation should not be left to the last moment. The full eligibility picture is in our requirements article.

Renewal timing in brief

The three-year cycle reflects FITSI's June 1, 2024 changes, which moved the Next Generation renewal cycle from six years to three. Older statements about a six-year mandatory retest or a 20-CPE-per-year requirement should not replace the current handbooks. Under current rules, at least 30% of CPE credits must come from structured education or training, and no more than 50% may come from self-directed reading or independent study.

Training Class Dates Are Not Exam Dates

One of the most common sources of confusion in "exam date" searches is conflating a training event with a testing appointment. FITSI-authorized training is explicitly optional, and a class on a calendar does not mean an exam seat is attached to that day.

For example, FITSI advertised an Authorized Training bundle, the FITSP-Auditor Review Course and Certification Exam, for September 22-24, 2026, priced at US$1,495 for members or US$1,695 for nonmembers. It included a US$395 Auditor exam voucher valid for one year from issue. That is a dated course-bundle example, not a standalone exam fee and not evidence of a future class. The three-day course and its 21 CPEs do not change the three-hour examination.

Commercial courseware vendors work similarly. LEXX, identified by FITSI as its courseware partner, advertises a five-day, 32-hour Auditor course with a package that includes an exam voucher, but its page stated on October 7, 2026 that no public classes were scheduled. Those hours and package prices are separate from the exam timer and the exam-only fee.

Voucher timing: If you buy a bundle that includes an exam voucher, note its validity period. A voucher valid for one year from issue effectively sets an outer deadline on your first attempt, so match your study timeline to that window. Our FITSP-Auditor training overview covers whether a course is worth adding.

Choosing a Date: Backward-Planning by Domain

Since FITSI does not impose a testing calendar, the best date is one you can defend with evidence from your own practice results. This is the one place where a structured study schedule is useful, and it should be tied to the Auditor weights rather than evenly distributed. The six official domains and their Auditor-specific weights, effective June 1, 2024, are:

The six Auditor domains by weight

  • Domain 1: NIST Special Publications (SPs) (21%)
  • Domain 3: NIST Control Families (CFs) (21%)
  • Domain 5: NIST Risk Management Framework (RMF) (20%)
  • Domain 4: Governmental Laws and Regulations (17%)
  • Domain 2: NIST Federal Information Processing Standards (FIPS) (13%)
  • Domain 6: NIST Interagency Reports (NISTIRs) (8%)

The Special Publications and Control Families domains tie for the largest allocation, with RMF close behind. Together those three carry 62% of the examination. See the complete domain guide for what each area covers.

Work backward from the date you are considering. A sensible sequence puts the heavy domains earliest, so there is time to revisit them:

Weeks 1-2

NIST Special Publications and Control Families

  • These two domains carry 21% each, so they anchor the whole plan
  • Map the 18 topic areas, from Access Control through System and Services Acquisition, to the control families you will be asked about
  • Remember the 18 topics are not additional exam domains; they intersect the six domains
Weeks 3-4

Risk Management Framework and Laws

  • Work through RMF (20%) as an auditor evaluating evidence, not an implementer
  • Cover Governmental Laws and Regulations (17%), focusing on federal requirements that drive assessment
Week 5

FIPS, NISTIRs and a timed full-length run

  • Cover the lighter domains: FIPS (13%) and NISTIRs (8%)
  • Sit a full 150-question, three-hour practice session to rehearse pacing without breaks

This five-week arc is a template, not a promise; a candidate with deep federal assessment experience may compress it, while someone new to NIST publications may extend it considerably. The deciding factor is your practice scores in the 21% domains. When those are consistently strong on unfamiliar questions, you are ready to book. Our study guide expands this into source-by-source reading priorities, and our practice tests let you check your readiness before spending US$100 on a reschedule.

Key Takeaway

Book your exam only after you have taken at least one timed, full-length run under no-break conditions. The absence of scheduled breaks is the detail most likely to surprise candidates on the day.

Outdated Date Information to Ignore

Because several sites compete for "FITSP-Auditor exam dates" searches, quality varies widely. A few reliable red flags:

  • Quarterly appointment tables. References to fixed 2020-era quarterly testing windows do not establish current availability.
  • In-person offers. FITSI's own registration page labels in-person testing "Currently Not Offered," so third-party claims of local test center dates should be treated with suspicion.
  • Wrong issuer or role details. One commercial landing page misnamed the issuing body. If a page cannot name FITSI correctly, do not rely on its fees or dates.
  • Old fee and cycle figures. Older six-year retest rules, 20-CPE-per-year statements and a US$45 annual fee have been superseded. Current figures are a three-year cycle, 60 CPE credits per cycle and a US$75 annual fee.
  • Mixed-role pages. Some preparation pages blend Auditor content with Manager headings. Confirm any page you use is specific to the Auditor role.

Likewise, claims about pass rates and salary tied to specific exam dates are unsupported. No official Auditor pass-rate figure or credential-specific salary dataset has been established, so see our pass-rate analysis for what can and cannot be said, and weigh the credential's value using the ROI discussion rather than date-based marketing.

Frequently Asked Questions

Are there fixed FITSP-Auditor exam dates in 2026?

No public national calendar of fixed dates was identified. FITSI administers and proctors the exam itself, with remote-proctored testing as the documented route. You arrange your date through FITSI's registration process, so confirm availability with FITSI directly rather than relying on third-party schedules.

Can I take the FITSP-Auditor exam in person?

FITSI's registration page describes in-person testing but labels it "Currently Not Offered." The handbook's in-person procedures do not establish that appointments are available. Plan for the remote-proctored format, which uses your own computer plus a second device for monitoring.

What does it cost to reschedule or retake?

Rescheduling costs US$100. An eligible same-role retest is US$197.50, available once after a failed exam, following a 21-calendar-day wait and within one year of the initial exam. Outside that allowance, the initial US$395 rate applies.

How long do I have to apply for certification after passing?

Five years after passing to submit the complete application, a current resume or CV, and two professional third-party endorsements. FITSI describes an assessment process of up to 60 days for a complete submission. Passing the exam alone does not award the certification.

Does a training class date count as my exam date?

No. FITSI training is optional and separate from the examination. A course such as the advertised September 22-24, 2026 bundle may include an exam voucher, but the class itself is not a testing appointment, and the exam remains a three-hour, 150-question sitting.

If you are still deciding whether to pursue the credential at all, start with what the FITSP-Auditor certification is, then return here to set a date once your preparation and documentation are on track.

Ready to pass your FITSP-Auditor exam?

Put this into practice with free FITSP-Auditor questions across every exam domain.