What Is A CIT?

The Short Answer: What a CIT Actually Is

If you searched "what is a CIT" and landed here, the first thing to settle is which credential we mean. The acronym is shared by several unrelated certifications in different industries. On this site, CIT means Certified Intrusion Technician Level II, an advanced certification for electronic security professionals who install, program, test and troubleshoot intrusion alarm systems. Nothing on this page applies to any other credential that happens to use the same letters.

The most important structural fact is this: CIT is a coursework-and-experience credential, not one standalone exam. There is no single "CIT test" you sit down for. Instead, you build a qualifying record: an existing Level I-or-higher credential, verified industry time, two required ESA courses (one of which carries a proctored multiple-choice exam), and a documented certification request. Candidates who prepare for a single mythical exam tend to study the wrong way, so the rest of this article keeps the components separate.

For a broader orientation to the acronym and related questions, see our companion pieces on what CIT certification is and what CIT stands for.

Who Issues It and Where It Sits in the ESA Ladder

The credential is offered through the Electronic Security Association (ESA) and its National Training School. Required course exams are administered by ESA, with online proctoring through Honorlock and Absorb, or through approved in-person arrangements. ESA positions Level II as the step above Level I: the Level I technician credential establishes foundational skills, while Level II layers on advanced intrusion system knowledge and the networking literacy that modern panels, communicators and IP-connected devices demand.

That relationship matters because Level I is not just background reading. The current program requires an active ESA Certified Alarm Technician Level 1 or higher ESA/accredited certificate before you can qualify. The Level I prerequisite is distinct from the two additional courses that make up Level II.

The Two Required Courses Behind the Credential

Advanced Intrusion Systems (AIS)

AIS is the technical heart of Level II and the component carrying the proctored examination. The online course runs 14 instruction hours on its course page (which still carries a "Revised 2020" tag), while the current live course listing shows 16 instruction hours. Both figures are course lengths, not exam timers. The AIS examination itself is a separate two-hour event. Candidates should check which version they are enrolling in, since the published figures differ between listings.

Nine published topics make up AIS: practical application of electronics, practical application of controls, system power, input and output, networking and communication, advanced systems and devices, testing and commissioning, project management, and residential and commercial sensor application.

Fundamentals of Networking

The second required course is a four-hour instruction course, again a length of instruction time rather than an exam timer. It ends with a terminal quiz that requires 70% or higher. The public listing does not verify the quiz's question count, item format or timer, so you should not assume it mirrors the AIS exam's 50 questions, two hours or open-book rules. Seven published subjects sit under this course, covering network components, topologies, data communication, storage types, cable composition, LAN versus WAN, and troubleshooting steps.

The AIS course page also describes a short 70% completion quiz. Do not confuse that with the separately required proctored certification examination.

Who Qualifies: Prerequisites and Documentation

Eligibility has four moving parts, and all must line up:

1. An active qualifying credential: an ESA Certified Alarm Technician Level 1 or higher ESA/accredited certificate.
2. Experience: either 24 months of verified industry work history or at least 24 months holding the qualifying Level I credential.
3. Required courses: Advanced Intrusion Systems (with its proctored multiple-choice examination) and Fundamentals of Networking, both completed within the previous five years.
4. A certification request with supporting documentation. The request itself is free.

The experience clause is worth reading carefully. It offers two routes: verified work history or time holding Level I. Candidates who have been in the field but let paperwork lag should start gathering employer verification early, because documentation, not knowledge, is often what slows a request down. Our CIT requirements guide walks through the eligibility details step by step.

The Sixteen Published Topic Areas

Sixteen topic headings organize the nine AIS topics and seven Fundamentals of Networking subjects published by ESA for the two required Level II courses. A crucial caveat: this is unweighted required-course preparation scope, not an official weighted or exhaustive examination blueprint. No published sixteen-domain CIT exam specification exists, no official domain weights are available, and no "largest domain" can be named. Any practice-question allocation you see, including on prep sites, is editorial. For a topic-by-topic breakdown, see our complete guide to the 16 content areas.

Keep the component boundary intact when you study. AIS material belongs to the AIS exam; networking material belongs to the networking quiz. Mixing the two in a single undifferentiated study pile blurs which assessment each fact serves.

Exam Format: What Is and Isn't Verified

This is where precision pays off, because the verified numbers belong to one component only.

What is confirmed for AIS: the official October 20-21, 2026 ESA training listing confirms 50 multiple-choice questions, open-book use of the course manual, a 70% passing score, a verified proctor for certification or licensing, and a two-hour examination. The AIS exam must be completed within a six-month window.

What is not publicly disclosed: the scored/unscored split and the candidate pass rate for AIS. Those remain unverified, so any pass-rate figure you encounter elsewhere should be treated with skepticism. Our pass-rate analysis explains what can and cannot be said responsibly.

Since there is no standalone CIT exam and no unified weighted blueprint, difficulty is best judged component by component. For a candid look, read how hard the CIT exam is and the explainer on the passing score.

Fees, Retakes and the Six-Month Window

Pricing depends on whether you are an ESA member and which route you take.

The "existing-prerequisite route" is for candidates who already hold the qualifying Level I credential and only need the two additional courses. If you do not yet hold Level I, the full online bundle is the broader option. Compare the totals against your situation before enrolling, and see our full pricing breakdown for context.

If you do not pass on the first attempt, the ESA FAQ lists a $135 retake fee and a six-month testing window for completing the exam process. Plan your first attempt as a real attempt, since a retake is an added cost on top of an otherwise fixed fee structure. Scheduling details are covered in our guide to testing windows and deadlines.

Validity and Renewal

Once earned, the credential is valid for 24 months. To renew, you complete 24 CEU hours per two-year period and submit an application and fee. The current renewal fee is not verified in the public sources reviewed, so confirm the amount with ESA directly rather than relying on a number from a third-party page.

Treat renewal as an ongoing professional habit. Because the cycle is only two years, it makes sense to log continuing education as you go rather than scrambling near the deadline.

Where the Credential Is Used

A Level II intrusion credential is most relevant to people working in the electronic security trade: alarm and security integration companies, installation and service contractors, and technicians who handle both residential and commercial intrusion systems. The curriculum itself signals the target audience, since the sensor-application topic explicitly spans residential and commercial work, and the networking course reflects how modern intrusion panels live on IP infrastructure.

Employers in this space generally care about demonstrated field competence, and a documented advanced credential is one way to signal it. This article does not quote salary figures, because none are verified for this credential. For earnings context and role types, see our salary guide, the overview of CIT jobs, and the worth-it analysis.

Sequencing Your Preparation Around the Topics

One generic principle is worth applying here: study in the order that dependencies run. Electronics and power underpin everything else in AIS, so they come first, while networking is a separate component you can schedule on its own. A sensible arrangement, assuming you are balancing work and study:

When you are ready to test yourself, use the CIT Exam Prep practice tests, and pair them with our first-attempt study guide and the one-page cheat sheet. Remember that any question allocation across topics in practice material is editorial, not an official blueprint, so use it to find weak spots rather than to predict the real distribution. You can also explore the full practice test library to drill specific areas.

Frequently Asked Questions