What Does CIT Stand For?

The Short Answer: Certified Intrusion Technician Level II

On this site, CIT stands for Certified Intrusion Technician Level II. It is a professional certification in the electronic security industry, offered through the Electronic Security Association (ESA) and its education arm, the National Training School. The name tells you the field (intrusion detection and alarm systems), the role (technician), and the tier (Level II, which sits above the entry-level technician credential).

If you landed here searching for the meaning of the letters, that is the whole answer. The rest of this article explains why the answer matters, how the credential is structured, and what a candidate actually has to do to earn it. For a broader orientation, you can also read our companion pieces on what CIT certification is and the meaning of CIT.

Why the Acronym Causes Confusion

Three letters can stand for many things, and several unrelated professional credentials and job titles abbreviate to "CIT." A search for the acronym will return results about entirely different fields, each with its own certifying body, fee schedule, and rules. None of those details apply to the intrusion technician credential described here.

That is worth stating plainly because candidates sometimes arrive with assumptions borrowed from elsewhere: a single proctored exam, a published weighted blueprint, a published pass rate. For Certified Intrusion Technician Level II, none of those assumptions hold. The credential is built from required coursework and verified experience, and the facts below are specific to the ESA pathway.

Who Stands Behind the Credential

The Electronic Security Association is the trade association for the electronic life safety and security industry in the United States, and the National Training School is its training and certification arm. The required course exams are administered by ESA, using Honorlock or Absorb online proctoring, or approved in-person arrangements where those are set up.

This matters for two reasons. First, the credential is rooted in an industry association rather than a general-purpose testing vendor, so the content reflects how alarm and intrusion technicians actually work. Second, proctoring requirements come from ESA's process, not from a third-party exam center network you would schedule through separately. If you want the logistics, see our guide to CIT exam dates and scheduling windows.

Decoding Each Word in the Name

Certified

The credential is granted after you satisfy documented requirements and submit a certification request with supporting documentation. It is not conferred automatically when you finish a class; the request step is part of the process, and it is free.

Intrusion

The domain is intrusion detection: sensors, controls, power, inputs and outputs, communication paths, and the way these combine into functioning security systems in homes and businesses.

Technician

This is a hands-on credential. The subject matter leans toward practical application: electronics, wiring, devices, testing, and commissioning, rather than purely theoretical security concepts.

Level II

Level II signals that the candidate already holds a Level I-or-higher credential from ESA or an accredited provider. The Level I prerequisite is separate from the two additional courses required at Level II. Candidates weighing the next step up often ask about difficulty; our difficulty guide covers that in detail.

How the Credential Is Actually Earned

The single most important structural fact about CIT is that it is a coursework-and-experience credential, not one standalone exam. There is no separate "CIT exam" with its own question bank and timer in the published pathway. Instead, you assemble the credential from several pieces:

1. A qualifying prerequisite credential: an active ESA Certified Alarm Technician Level 1 or higher ESA/accredited certificate.
2. Experience: either 24 months of verified industry work history or at least 24 months holding the qualifying Level I credential.
3. Two required courses: Advanced Intrusion Systems and Fundamentals of Networking, both completed within the previous five years.
4. A certification request: submitted with supporting documentation.

Our CIT requirements guide walks through eligibility documentation in more depth.

The AIS online course runs 14 instruction hours on the course page, which is still marked as revised in 2020, while the current live course is listed at 16 instruction hours. These are course lengths, not exam timers; the AIS exam itself is two hours. The AIS course also includes a short 70% completion quiz, which is not the same thing as the separately required proctored certification exam. Candidates have a six-month window to complete the exam process, and the ESA FAQ lists a $135 retake fee.

Two Required Courses, Sixteen Topic Areas

ESA publishes nine topics for Advanced Intrusion Systems and seven subjects for Fundamentals of Networking. We organize these as sixteen content areas for preparation. To be clear, these are public course topics, not a weighted exam blueprint: no official percentages, no ranked "largest domain," and no exhaustive question inventory exist. Our full breakdown is in the CIT exam domains guide.

Notice the overlap between the AIS "Networking and Communication" topic and the dedicated networking course. A candidate who understands cabling, topologies, and data sharing in the networking course will find the AIS communication material far easier. The reverse also holds: AIS exposure to communicators and system integration gives context to abstract networking vocabulary.

Fees, Retakes, and Renewal Mechanics

Pricing depends on membership status and on what you have already completed. For the full picture, see our CIT certification cost breakdown. The figures from ESA's published listings are:

The certification request itself is free. If you need to retake an exam, the ESA FAQ lists a $135 retake fee, and you work within a six-month testing window.

Validity and renewal

The credential is valid for 24 months. Renewal requires 24 CEU hours per two years, plus an application and fee. The current renewal fee is not verified in the sources we reviewed, so confirm it with ESA before budgeting. Renewal and experience periods are administrative requirements; do not confuse them with exam durations.

Where the Credential Fits in the Workforce

The employers most likely to value a Level II intrusion credential are those whose work involves installing, programming, and servicing intrusion and alarm systems: security integrators, alarm dealers and monitoring-company field teams, and low-voltage contractors that handle commercial security alongside access control or fire. The credential signals that a technician has gone beyond entry-level skills into advanced systems, networking, and project-level thinking.

Specific job duties vary, and we do not assert salary figures here because none are established in our source facts. If earnings and career positioning are your focus, read our CIT jobs overview, the CIT salary guide, and the ROI analysis. The AIS topics on project management and commercial sensor application are particularly relevant to technicians moving toward lead or supervisory field roles.

Sequencing Your Preparation

Because the AIS component carries the proctored, open-manual exam, sequence your effort around it, and use the networking course to reinforce the AIS communication topics. A workable order looks like this:

Open book does not mean easy. Fifty questions in two hours leaves limited time per item, so the manual should confirm what you already know, not teach it to you mid-exam. For a fuller plan, see the CIT study guide and the one-page CIT cheat sheet.

Frequently Asked Questions

Understanding the name is only the first step. The real work is in the two required courses and the AIS exam, so move from vocabulary to practice as soon as you are comfortable with the structure.