The complete ServiceNow certification path for 2026

How ServiceNow certifications work

ServiceNow certifications fall into three tiers. The first tier contains the mainline certifications: CSA, CAD, and the full family of CIS (Certified Implementation Specialist) exams. These are what most ServiceNow professionals pursue. The second tier holds specialist certifications like CAS-PA (Certified Application Specialist, Performance Analytics). The third tier is where the expert-level credentials live: CTA (Certified Technical Architect), CMA (Certified Master Architect), and the newer CRMA and CPOP programs.

All mainline exams run through Pearson VUE. You can sit them at a testing center or take them online with a proctor watching through your webcam. The format is consistent across all mainline certs: around 60 questions, 90 minutes, and a passing threshold that ServiceNow does not publicly disclose. The exact cutoff varies by exam form and is not always the same percentage. Aim for 80% or higher on practice tests to give yourself a comfortable margin.

Training courses through ServiceNow are recommended but not mandatory for any mainline exam. You can register for any exam without completing the associated course first. This is a change from older policies that required course completion vouchers. The training is good, but it is not a gate.

All current exams target the Zurich release. If you are reading documentation from Xanadu or Washington, some answers will be wrong. Always check the release selector on docs.servicenow.com before you trust a page.

If you want a quick answer to "which cert should I get first," read the quick decision guide. This article is the reference. It covers every certification that exists and shows how they link together.

Entry points

There are four ways into the ServiceNow certification ecosystem. Most people start with one of the first two, but the third has become the most urgent for 2026.

CSA (Certified System Administrator)

The CSA is the broadest exam in the ecosystem. It covers platform fundamentals: user interface navigation, security and access controls, service catalog configuration, reporting, workflow and Flow Designer basics, notifications, update sets, and system administration tasks. No prerequisites. The exam costs $300 for your first attempt and $150 for a retake.

This is the starting point for the majority of ServiceNow careers. Over 80% of certified professionals hold a CSA, and most job postings list it as a minimum requirement. Even if you plan to specialize immediately, CSA gives you the vocabulary and platform fluency that every other cert assumes you already have. Read the CSA study guide for exam prep details, or see the CSA practice test on Udemy.

CAD (Certified Application Developer)

The CAD targets developers who build applications on the ServiceNow platform. It covers client-side and server-side scripting, Flow Designer, scoped application development, security models for custom apps, UI policies, business rules, script includes, and integration basics. CSA is recommended but not strictly required as a prerequisite.

The exam costs $300 for the first attempt and $150 for a retake. If your day-to-day work involves writing code on ServiceNow rather than configuring existing modules, CAD is your natural entry point after CSA. See the CAD study guide or grab the CAD practice test.

CIS-DF (CIS Data Foundations)

CIS-DF tests your knowledge of the CMDB, CSDM (Common Service Data Model), and data governance. It has no prerequisites, which makes it an unusual CIS-level exam. You do not need CSA to sit for CIS-DF, though platform experience helps.

The exam normally costs $450 for the first attempt and $225 for a retake. But ServiceNow is currently offering a free first attempt through June 30, 2026. This promotional window is the reason CIS-DF has become the most talked-about certification in the ecosystem right now.

What makes CIS-DF critical is the mandate: it is now a required prerequisite for seven other CIS certifications. If you plan to earn ITSM, Discovery, HAM, SAM, Service Mapping, SIR, or VR, you must pass CIS-DF first. If you already hold one of those seven certs, you need CIS-DF by December 31, 2026 or your existing certification expires. The CIS-DF study guide walks through the exam in detail. The CIS-DF practice test covers all five domains.

CPOA (Certified Platform Owner Advisor)

CPOA is for non-technical platform owners with 3 to 5 years of experience managing a ServiceNow instance. It covers platform strategy, governance frameworks, value realization, and stakeholder alignment. There are no hard prerequisites, but the exam assumes real-world experience running a ServiceNow program. This cert is less common than CSA or CAD, but it fills an important gap for people in leadership roles who do not write code or configure modules directly.

The CIS-DF mandate

In 2025, ServiceNow announced that CIS-Data Foundations would become a mandatory prerequisite for a subset of CIS certifications. That policy is now in effect. Here is exactly what changed and who it affects.

Seven CIS certifications now require CIS-DF before you can sit for the exam: CIS-ITSM, CIS-Discovery, CIS-HAM, CIS-SAM, CIS-Service Mapping, CIS-SIR, and CIS-VR. If you do not hold CIS-DF, you cannot register for any of these seven exams. The enforcement is at the registration level, not just a recommendation.

Seven CIS certifications are not affected by this mandate: CIS-CSM, CIS-HRSD, CIS-FSM, CIS-SPM, CIS-TPRM, CIS-Event Management, and CIS-GRC/IRM. You can still pursue any of these without CIS-DF.

The pattern behind this split is straightforward. The seven affected certs all rely on the CMDB as a core data source. ITSM uses CIs for incident and change management. Discovery and Service Mapping populate the CMDB. HAM and SAM manage assets stored in the CMDB. SIR and VR pull security data from CMDB records. ServiceNow decided that if your cert depends on CMDB data, you should prove you understand how that data works.

For existing cert holders, the deadline is December 31, 2026. If you already hold CIS-ITSM, CIS-Discovery, CIS-HAM, CIS-SAM, CIS-Service Mapping, CIS-SIR, or CIS-VR, you must pass CIS-DF before that date. If you do not, your CIS certification loses its active status. And if your CIS cert underpins a CTA or CMA credential, that expert-level cert is at risk too.

The free first attempt runs through June 30, 2026. After that date, CIS-DF costs $450 for the first attempt and $225 for retakes. If you fall into the affected group, the financial case for passing during the free window is obvious. For a deeper look at how CIS-DF compares to CSA, read the CIS-DF vs CSA comparison.

ITSM track

Path: CSA then CIS-DF then CIS-ITSM.

CIS-ITSM is the most common specialization in the ServiceNow ecosystem. It covers incident management, problem management, change management, and request management. These are the core ITIL processes that most ServiceNow implementations start with, and the module that generates the most admin and consultant job postings.

The exam costs $450 for the first attempt and $225 for a retake. Because CIS-ITSM is now one of the seven certs affected by the CIS-DF mandate, you must hold CIS-DF before you can register.

Salary data for ITSM-focused ServiceNow professionals ranges from $103,000 to $131,000 depending on experience, location, and whether you work as an employee or a contractor. The range is solid, but where ITSM professionals command premium rates is when they pair it with a second specialization.

There is a clear hiring trend in 2026 that recruiters call "ITSM Plus One." Employers want candidates who hold CIS-ITSM plus at least one additional CIS certification. The most requested combinations are ITSM with GRC, ITSM with SPM, and ITSM with CSM. Holding ITSM alone is still marketable, but the "Plus One" pattern is where the higher-paying roles cluster. If you already have ITSM, your second cert should be chosen based on what your current employer or target employer uses most.

ITOM and Data track

Path: CSA then CIS-DF then CIS-Discovery, and optionally CIS-Service Mapping or CIS-Event Management.

The ITOM track is about infrastructure visibility. Discovery scans your network and populates the CMDB with configuration items: servers, switches, storage devices, cloud instances, applications. Service Mapping takes that a step further by connecting individual CIs into business service maps that show which infrastructure components support which business applications. Event Management handles alert correlation, pulling events from monitoring tools and grouping them into actionable alerts.

CIS-Discovery and CIS-Service Mapping both require CIS-DF under the new mandate. CIS-Event Management does not. This makes Event Management an interesting standalone option if you want to enter the ITOM space without the CIS-DF prerequisite, though in practice most ITOM professionals hold Discovery as their anchor cert.

The ITOM track pairs naturally with the ITSM track. An organization that uses Discovery to populate the CMDB will also use ITSM processes to manage changes to those CIs. Holding both CIS-Discovery and CIS-ITSM (with CIS-DF as the foundation for both) makes you one of the more versatile ServiceNow professionals on the market.

Security track

Path: CSA then CIS-DF then CIS-SIR then CIS-VR, with CIS-GRC/IRM as an independent option.

SecOps is the fastest-growing track in the ServiceNow ecosystem. CIS-SIR (Security Incident Response) covers security incident workflows, threat intelligence integration, and security playbooks. CIS-VR (Vulnerability Response) covers vulnerability scanning integration, remediation workflows, and risk scoring. Both SIR and VR require CIS-DF under the mandate.

CIS-GRC/IRM does not require CIS-DF. It operates independently and covers governance, risk, and compliance management: policy lifecycle, risk assessment, control testing, audit management, and regulatory compliance tracking. While it falls under the security umbrella, its data model is less dependent on the CMDB than SIR or VR, which is why ServiceNow excluded it from the mandate.

Salary data for security-focused ServiceNow professionals runs from $125,000 to $160,000. That upper range reflects real scarcity. ServiceNow ecosystem reports consistently note that there are too few certified SecOps specialists relative to demand. Organizations are building security operations centers on ServiceNow at a faster rate than the talent pool is growing. If you are choosing a specialization purely on market demand, security is the strongest signal right now.

The natural pairing here is SIR plus VR. They share enough conceptual overlap that studying for one prepares you for roughly 40% of the other. Adding GRC/IRM on top creates a security triple that is rare and highly marketable.

Asset Management track

Path: CSA then CIS-DF then CIS-HAM or CIS-SAM (or both).

CIS-HAM covers hardware asset lifecycle management: procurement, receiving, stockroom management, asset disposal, and financial tracking of physical assets. CIS-SAM covers software asset management: license entitlements, software discovery, compliance calculations, reclamation, and vendor management. Both require CIS-DF.

These two certs are often pursued together because the knowledge overlaps significantly. Both use the CMDB as their data backbone, both deal with lifecycle states and financial models, and both interact with Discovery data to reconcile what is installed against what is licensed or tracked. If you are planning to get one, budget the time to get both. The incremental study effort for the second exam is smaller than studying for any other CIS cert from scratch.

Asset management is a growing segment because organizations are under increasing pressure to track both physical and software assets for cost optimization, security compliance, and audit readiness. The work is less glamorous than security or ITSM, but the demand is steady and the competition for roles is lower.

Service Management track

Path: CSA then directly to CIS-CSM, CIS-HRSD, CIS-FSM, or CIS-SPM. None of these require CIS-DF.

This is the track where CIS-DF is not a factor. All four of these certifications can be pursued directly after CSA, with no additional prerequisite.

CIS-CSM (Customer Service Management) covers customer-facing service portals, case management, entitlements, and customer workflows. It is the cert for teams that use ServiceNow to manage external customer interactions rather than internal IT operations.

CIS-HRSD (HR Service Delivery) covers employee service centers, case and knowledge management for HR, lifecycle events, and employee document management. This is one of the fastest-growing modules in ServiceNow. Job postings mentioning HRSD have crossed the 1,000 mark on major hiring platforms, and demand continues to climb as organizations move their HR operations onto ServiceNow.

CIS-FSM (Field Service Management) covers work orders, dispatch, scheduling, and mobile workforce management. It is more niche than CSM or HRSD, but organizations with field technicians (telecom, utilities, healthcare equipment) rely on it.

CIS-SPM (Strategic Portfolio Management) covers project management, demand management, resource management, and portfolio-level decision making. If your organization uses ServiceNow to run its project portfolio rather than a tool like Jira or Smartsheet, SPM is your cert.

The fact that none of these require CIS-DF makes this track attractive for people who want to specialize quickly without the extra exam. But if your long-term plan includes branching into ITSM or Discovery later, getting CIS-DF while it is free is still worth the time investment.

GRC and Risk track

Path: CSA then directly to CIS-GRC/IRM or CIS-TPRM. Neither requires CIS-DF.

CIS-GRC/IRM is one of the most in-demand modules in ServiceNow right now. It covers policy and compliance management, risk assessment frameworks, control testing, audit management, and the Integrated Risk Management (IRM) workspace. Organizations under regulatory pressure (financial services, healthcare, government) are deploying GRC at a fast pace, and the supply of certified professionals is not keeping up.

CIS-TPRM (Third-Party Risk Management) is the newer addition. It covers vendor risk assessments, questionnaire management, continuous monitoring of third-party risk, and integration with external risk intelligence sources. TPRM has become urgent as supply chain security and vendor compliance requirements tighten across industries.

The GRC/IRM plus ITSM combination is one of the strongest "ITSM Plus One" pairings. An ITSM professional who also holds GRC/IRM can bridge the gap between IT operations and compliance teams, which is exactly the profile that large enterprises and consulting firms are hiring for. Neither GRC/IRM nor TPRM requires CIS-DF, so this entire track can be completed with just CSA as the prerequisite.

Developer track

Path: CSA then CAD then CAS-PA.

CAS-PA (Certified Application Specialist, Performance Analytics) is the developer specialist cert. It covers Performance Analytics reports, indicators, dashboards, data collection jobs, and PA widgets. It does not require CIS-DF.

The developer track appeals to people who spend most of their time building custom applications, writing scripts, and creating reporting solutions on ServiceNow. The CSA-to-CAD path establishes your platform and development fundamentals. CAS-PA adds a layer of specialization that is relevant to almost every ServiceNow implementation, because every organization wants dashboards and KPI tracking.

Developer salaries in the ServiceNow ecosystem range from $122,000 to $130,000 for mid-level roles. Senior developers and architects push well above that, especially if they hold CAD plus one or more CIS certs. The developer track does not lock you into a single module the way the CIS tracks do. A CAD holder can work on any ServiceNow application, which gives you flexibility if you want to move between projects or consulting engagements.

Expert-level certifications

CTA (Certified Technical Architect)

CTA is the most prestigious certification in the ServiceNow ecosystem. It is not a multiple-choice exam. CTA candidates go through a multi-month program that includes training modules, architecture exercises, and culminates in a live architecture board review. You present a solution design to a panel of CTAs and ServiceNow architects who evaluate your ability to design at an enterprise scale.

Prerequisites include multiple CIS certifications and documented architecture experience. The program cost ranges from $7,000 to $17,000 depending on the format and cohort. Salary data for CTAs ranges from $151,000 to $175,000 and beyond, with many CTAs working as independent consultants at premium day rates. There are only a few hundred active CTAs globally, which is why the credential carries so much weight.

One important note for 2026: if your CTA status depends on underlying CIS certifications that require CIS-DF, and you do not pass CIS-DF by December 31, 2026, your CIS cert expires. That puts your CTA status at risk. If you are a CTA, do not ignore the CIS-DF mandate.

CMA (Certified Master Architect)

CMA sits above CTA. It is invitation-only. You must already hold CTA, and you go through an additional board review process that evaluates your ability to design across multiple ServiceNow products and business domains simultaneously. CMA holders are extremely rare. The credential signals the highest level of ServiceNow architecture expertise that exists.

CRMA (Certified Risk Management Architect)

CRMA is new for 2026. It is a risk-focused architecture credential with a program cost of approximately $4,000. It targets professionals who design and implement governance, risk, and compliance solutions at scale. The CRMA sits between the CIS-level certs and the CTA in terms of prestige and scope. It is a good stepping stone for GRC specialists who want to move toward architecture work without committing to the full CTA program.

CPOP (Certified Platform Owner Professional)

CPOP is still in beta as of early 2026. It is the professional-level follow-up to CPOA (which is the advisor-level cert for platform owners). Details on format, pricing, and availability are expected later this year. If you already hold CPOA and want to deepen your platform ownership credentials, watch for announcements on the ServiceNow training portal.

Micro-certifications and accreditations

ServiceNow offers free micro-certifications through Now Learning. These are not full certifications. They do not carry the same weight as a CSA, CAD, or CIS credential on a resume. But they serve two useful purposes.

For beginners, micro-certifications are a way to build familiarity with ServiceNow before committing to a paid exam. They demonstrate that you have completed structured learning on a specific topic, which is more than an empty LinkedIn profile shows. Examples include micro-certifications for Flow Designer, Virtual Agent, App Engine Studio, and Predictive Intelligence. You complete them online through Now Learning at no cost.

For experienced professionals, micro-certifications add breadth. If you hold CIS-ITSM and want to show awareness of IntegrationHub or Workspace Builder without sitting for another full exam, a micro-certification does that. They take a few hours to complete, not weeks. They will not move the salary needle the way a CIS cert does, but they fill gaps in your profile and signal continuous learning to hiring managers who check Now Learning profiles.

Certification costs at a glance

Costs vary by certification level. Here is the full breakdown for 2026.

Certification level	First attempt	Retake	Notes
CSA / CAD	$300	$150	Entry-level mainline
All CIS exams	$450	$225	Specialist level
CIS-DF (promotional)	FREE	$225	Free through June 30, 2026
CAS-PA	$300	$150	Developer specialist
Expert programs (CTA/CMA)	$7,000-$17,000	Varies	Includes board review
CRMA	$4,000	N/A	New for 2026
Micro-certifications	FREE	N/A	Through Now Learning

The price gap between a CIS exam ($450) and a practice test ($9.99) is worth thinking about. A retake alone costs $225. If you spend $9.99 on preparation and avoid one retake, you have saved $215 and the time it takes to rebook and restudy. The full cost breakdown article covers budgeting strategies, employer reimbursement tips, and how to maximize the free CIS-DF window.

How to choose your path

If you are brand new to ServiceNow, start with CSA. There is no shortcut around this. CSA gives you the platform knowledge that every other certification builds on. You can technically skip it for some exams, but you will struggle with questions that assume you understand how the platform works at a fundamental level.

If you already hold CSA, pick a track that matches your current role or the role you want next. If your target track requires CIS-DF (ITSM, Discovery, HAM, SAM, Service Mapping, SIR, or VR), get CIS-DF next. It is free through June 2026, and you cannot register for any of those seven exams without it. There is no reason to delay a free exam that unlocks your next certification.

If you are a developer, the path is CSA then CAD. CAS-PA is optional but useful if you work with dashboards and reporting. The developer track does not touch CIS-DF unless you later decide to add a CIS specialization that requires it.

If you already hold one of the seven affected CIS certifications, CIS-DF should be your immediate priority. The December 31, 2026 deadline is not negotiable. Missing it means your CIS cert loses active status, which affects your professional profile and potentially your employment terms if your role requires active certification. Do not wait until Q4 when exam slots fill up and stress levels peak. Take it during the free window.

If you are not sure which track fits you, the certification recommendation quiz asks about your current role, experience level, and career goals, then suggests a path. The quick decision guide offers a faster version: a flowchart-style walkthrough for people who just want an answer. And the certification comparison table lays all 18 certifications side by side so you can compare prerequisites, costs, and job market demand in one view.

For an overview of how the ServiceNow certification landscape has shifted in the past year, the 2026 landscape analysis covers the broader trends: the CIS-DF mandate, the rise of security certs, the ITSM Plus One pattern, and where the ecosystem is headed next.

One final thought. Certifications are not trophies. They are tools for getting hired, getting promoted, or justifying a rate increase. Pick the one that solves a problem you have right now, not the one that looks most impressive in the abstract. A CIS-ITSM that lands you a promotion is worth more than a CTA that sits on your wall while you do work that does not require it. Match the cert to the outcome you want, study efficiently, pass on your first attempt, and move on to the next one.