- The Four Official SISA Price Points
- Choosing the Right Bundle for Your Eligibility Route
- What Your Money Actually Covers
- Costs the Price Tag Does Not Show
- Retake Math and the Super Bundle
- Spending on Preparation Without Overpaying
- Three Budget Scenarios
- Weighing Cost Against Career Value
- Frequently Asked Questions
- SISA's store lists four options: $199 certification-only, $449 training plus certification, $430 training only, and $500 super bundle with one retake.
- The exam is 50 questions in 60 minutes with a 62% passing score, not the 66% used by base CPISI.
- Certification-only needs proof of eligibility: a 16-hour CPISI-D workshop, equivalent formal training, or the issuer's experience route.
- Convenience charges are nonrefundable, and the store shows dollar signs without naming a currency, so verify at checkout.
The Four Official SISA Price Points
The Certified Payment Industry Security Implementer - Developer (CPISI-D) is issued by SISA, and the prices below come from the official SISA Training and Certification Store. The credential is separate from CPISI and CPISI Advanced, so pricing and rules for those tracks should not be assumed to carry over. If you are still orienting yourself on the credential itself, start with What Is CPISI-D? before comparing options.
| Store Option | Listed Price | What It Includes |
|---|---|---|
| Certification only | $199 | Exam and application |
| Training only | $430 | Workshop without the certification attempt |
| Training plus certification | $449 | Workshop and exam attempt |
| Super bundle | $500 | Training, certification, and one retake |
The store uses dollar notation without an explicit currency code. Treat the figures as the listed amounts and confirm the checkout currency before you label any of them as US dollars in a budget request or expense report. Additional convenience charges are nonrefundable, so read the final checkout total before paying.
Choosing the Right Bundle for Your Eligibility Route
The cheapest option is not always available to you. The certification-only price of $199 assumes you already satisfy an eligibility pathway. The verified alternatives are:
- Completing SISA's 16-hour CPISI-D workshop.
- Holding equivalent formal training of at least 16 hours that covers the blueprint topics.
- Meeting the issuer's minimum-one-year verifiable full-time experience route.
The experience route needs care. The issuer refers to qualifying areas but does not spell them out on the page reviewed, and that route requires clarification from SISA rather than guesswork. Do not assume that every year of developer work qualifies, and do not rebuild the criteria from the listed recommended job roles. Our CPISI-D requirements guide covers eligibility in more depth.
If you qualify through experience or prior training
You may be able to buy certification-only at $199, but confirm in writing that your documentation is accepted before paying. A rejected application is a worse outcome than paying $250 more for the training bundle, because you would lose time as well as money.
If you have no qualifying background
The $449 training plus certification option is the straightforward path. It satisfies the workshop requirement and includes the exam, so there is no separate eligibility paperwork to argue over.
If you want a safety net
The $500 super bundle adds a retake for an extra $51 over the $449 combination. For candidates who are new to secure coding in a payments context, that is the cheapest insurance on the menu.
What Your Money Actually Covers
Understanding the product helps you judge whether the price is fair. The exam is 50 questions in 60 minutes, with a passing score of 62%. That works out to roughly 31 correct answers, so the exam rewards breadth across all seven published topics rather than perfection in one. For a deeper look at how the cut score plays out, see CPISI-D Passing Score.
Training is a two-day live-online offering totaling 16 hours. That is a training course, not an examination format, and it is not a verified description of how the exam is delivered. Exercises during the workshop do not constitute a separate timed or scored practical exam, so your $199 exam fee buys you the 50-question assessment and nothing else.
The Seven Published Exam Topics
SISA's current certification page lists these as unweighted headings. No official percentage weights are published, so be wary of any source that quotes them.
- Background of Payment Industry
- Security By Design
- PA-DSS and S3 Standards
- Payment Card Industry Security Standards
- OWASP Web and Mobile Security
- Common Coding Vulnerabilities
- Threat Modelling
One heading deserves a note. The topic "PA-DSS and S3 Standards" keeps the legacy name even though the PCI Security Standards Council states that PA-DSS retired on October 28, 2022. The current workshop curriculum emphasizes PCI-SSF and OWASP. That does not change the exam heading, so study the standards transition as context while expecting the issuer's wording to appear as published. Our domains guide breaks down each area.
Costs the Price Tag Does Not Show
Convenience charges
The store notes that additional convenience charges are nonrefundable. Because the final amount depends on checkout, the sticker price may not equal what leaves your account. Screenshot the final total before confirming.
Currency and card fees
Since the store does not name a currency, a candidate paying from outside the store's billing region may see conversion fees or exchange-rate differences from their bank. Budget a small cushion rather than assuming the listed figure is exact.
Time off work
The two-day live-online workshop is the largest hidden cost for employed candidates. Two working days of leave or reduced billable time can exceed the price of the exam itself. If your employer is covering the course, negotiate paid time as part of the approval.
Renewal and maintenance
This is the most important unknown. Renewal intervals and CPE requirements for CPISI-D are unverified, and the base CPISI renewal rules should not be transplanted onto this credential. Until SISA confirms the terms for the Developer credential, treat long-term maintenance cost as an open question and ask the issuer directly. SISA's certification policy page is the place to check for updates.
Retake Math and the Super Bundle
The super bundle at $500 includes one retake. Compare that to buying the training-plus-certification option at $449 and then needing another attempt. The article source for the store does not give a standalone retake price in the facts reviewed here, so you cannot assume a retake costs $199 again. Confirm the retake fee with SISA before relying on a number.
| Scenario | Option | Listed Cost |
|---|---|---|
| Pass on first attempt | Training plus certification | $449 |
| Pass on first attempt | Super bundle | $500 |
| Need a second attempt | Super bundle | $500 (retake included) |
| Need a second attempt | Training plus certification | $449 plus an unconfirmed retake fee |
The extra $51 for the super bundle buys certainty. If you would be stressed by an uncertain retake fee, take the bundle. If you have strong secure-development experience and have already studied the material, the cheaper combination is reasonable. For a sense of how demanding the exam is before you decide, read How Hard Is the CPISI-D Exam?
Spending on Preparation Without Overpaying
The workshop publishes preparation coverage of cryptography and key management, hashing and tokenization, application authorization and access control, audit logging, OWASP web and mobile security, and secure deployment and production support. These are preparation subjects, not additional exam domains, and they do not prove exhaustive exam coverage or establish weights. Treat them as a study checklist for what a payment-application developer should know, while keeping the seven published headings as your scoring map.
Because the official materials are bundled with the workshop, extra spending should be targeted at weak spots. A useful way to allocate a small study budget is to match time and money to the topics where developers tend to be thinnest:
Payment Industry Background and PCI Standards
- Developers often skip the business context; learn the roles of card brands, acquirers, and processors
- Review the PCI standards landscape and the PA-DSS retirement and PCI-SSF transition
Security by Design and Threat Modelling
- Practice walking a payment flow and identifying trust boundaries
- Connect design decisions to cryptography, tokenization, and access control
OWASP and Common Coding Vulnerabilities
- Cover web and mobile risk categories and the coding mistakes behind them
- Use practice questions to test recognition under the 60-minute clock
That schedule front-loads the topics where experienced coders are most likely to be surprised, namely payment-industry context and standards terminology, and leaves the code-level material for when the framing is in place. For a fuller plan, see the CPISI-D study guide, and for a quick refresher near exam day use the CPISI-D cheat sheet.
Timed practice is the most cost-effective extra you can add, since 50 questions in 60 minutes leaves little room to deliberate. Our practice tests let you rehearse that pace before paying for a retake.
Three Budget Scenarios
The self-funded developer with no prior training
You need the workshop to qualify, so the realistic choices are $449 or $500. If you are early in your secure-coding journey, the $500 super bundle is the safer pick. Add the cost of two days away from regular work.
The employee with an approved training budget
Ask whether your employer will cover the workshop, the exam, or both. Many companies will pay for the combined option and may reimburse a retake if you fail. Present the cost as a single line item and attach the store listing so approval is quick.
The experienced developer with a verifiable background
If you believe you meet the one-year experience route, contact SISA to confirm that your specific experience qualifies before paying $199. If it is accepted, you save money. If it is not, you will have lost nothing by asking first.
Weighing Cost Against Career Value
At the listed prices, CPISI-D sits at the affordable end of professional security credentials, and a few hundred dollars is small relative to what a payments employer typically spends on a developer. The value depends on whether the roles you want ask for it. Organizations that build or maintain payment applications, and consultancies that serve them, are the natural audience. Explore CPISI-D jobs to see where the credential is relevant, and review the salary guide and the ROI analysis for the broader return picture.
No salary or pass-rate figures are published by the issuer in the facts reviewed here, so any source quoting precise numbers deserves scrutiny. The honest cost-benefit conclusion is qualitative: the fee is modest, the credential targets a specific developer audience, and the main financial risks are an unconfirmed retake fee, unknown renewal terms, and the time cost of the workshop.
Frequently Asked Questions
The official SISA store lists certification-only at $199, which includes the application. You must satisfy an eligibility route, such as the 16-hour workshop, equivalent formal training, or the issuer's experience route, and you should confirm the checkout currency since the store shows only a dollar sign.
Yes. Training plus certification is $449, while training only is $430 and certification only is $199. Buying the training and exam separately would total $629, so the combined option saves a substantial amount.
It includes training, certification, and one retake for $500. That is $51 more than the $449 combined option, and it removes uncertainty about the cost of a second attempt if you do not pass the 50-question, 62% exam the first time.
Additional convenience charges are described as nonrefundable. Check SISA's certification policy page for any other refund or rescheduling terms before you pay, and keep a copy of the checkout total.
That is not confirmed. The renewal interval and CPE requirements for CPISI-D remain unverified, and base CPISI renewal rules should not be assumed to apply. Ask SISA directly and record the answer before building a long-term budget.
For more background on the credential and its exam timing, see CPISI-D exam dates, the pass rate discussion, and the companion cost overview.