Searches for “IRB certification” or “IRB cert” almost always mean one of two very different things, and confusing them causes real compliance problems: completing the required human-subjects-research training an institution mandates before someone can conduct, review, or staff a study, or holding a formal individual professional credential in IRB administration. Only the second is a “certification” in the strict sense of a credentialing body testing and certifying an individual. The first — what almost everyone actually means when they say “I need my IRB certification” — is training-completion documentation, not a credential. This guide walks through both, plus the related but distinct concept of institutional accreditation.
The short answer
For the overwhelming majority of people who ask about “IRB certification,” what’s actually required is: complete the human-subjects-research training modules your institution mandates (almost always delivered through the CITI Program), which produces a completion record/certificate tied to your institutional profile. That completion record is what an IRB office checks before it will accept a new protocol submission or add someone to a study team — it is not a government license, it does not expire in the way a professional license does (though it typically requires renewal, commonly every 3 years), and it is not portable in the way a formal credential is: a new institution will usually require you to affiliate your CITI record with its own subscription and complete any institution-specific modules, even if your underlying coursework transfers.
Who needs what training, and why it differs by role
“IRB certification” is not one training requirement — institutions layer requirements by role, because the Common Rule (45 CFR 46) and FDA human-subjects regulations (21 CFR 50/56) place different obligations on different participants in the research-review system:
- IRB members (the voting board reviewing protocols) typically complete a human-subjects-protection curriculum plus IRB-administration-specific modules covering board procedures, criteria for approval, and continuing review — because they’re applying the regulatory criteria, not just following them.
- Principal investigators and co-investigators conducting human-subjects research complete the core human-subjects-protection curriculum (basic/biomedical or social-behavioral-educational track, depending on the research type), and — for FDA-regulated or NIH-funded clinical trials — Good Clinical Practice (GCP) training as well. See CASRAI’s GCP Certification guide for how that requirement is scoped and who it applies to.
- Study coordinators and other research staff who interact with participants, collect data, or handle consent generally complete the same core human-subjects curriculum as investigators, sometimes with role-specific add-on modules (e.g., informed-consent-process training).
- IRB administrative staff (the office coordinating submissions, agendas, and correspondence, distinct from the voting members) often complete both the human-subjects curriculum and administration-track coursework, and are the most likely group to eventually pursue the individual professional credential described below.
The specific combination and renewal interval is set at the institutional level (often documented in an institution’s Federalwide Assurance-linked policies), not by a single federal rule — this is genuinely one of the areas where “check your own institution’s HRPP policy” is the accurate answer rather than a deflection. See CASRAI’s IRB dictionary term for the board’s structure and composition requirements, and the IRB/REC Approval Process guide for what happens after training is on file and a protocol is actually submitted.
CITI Program: the dominant training platform
In practice, “get IRB certified” and “complete your CITI training” are treated as synonymous at most U.S. research institutions, because CITI is the training infrastructure the vast majority of them use to deliver and document this coursework. CITI is not a regulation, a funder policy, or a credentialing body — it’s the platform institutions subscribe to and point learners at to satisfy requirements that originate elsewhere (the Common Rule, FDA regulations, NIH/NSF award terms, ICH E6). Completing a CITI module produces a completion report and certificate, which is what most people mean by an “IRB certificate,” but that document reflects training completion, not an assessed professional competency the way a licensing exam does. For a full treatment of what CITI covers, its history and ownership, and — importantly — where the cross-institutional verification gap remains when someone moves institutions, see CASRAI’s dedicated CITI Program guide.
What “IRB certification” is not: individual professional credentials that do exist
A small number of genuine, tested, individually-held credentials do exist in this space — but they’re aimed at IRB administration as a career, not at the general population of researchers and study staff:
- Certified IRB Professional (CIP®) — a credential from the Council for Certification of IRB Professionals (CCIP), administered under Public Responsibility in Medicine and Research (PRIM&R). Eligibility requires a bachelor’s degree plus two years of relevant human research protection program (HRPP) experience, or three years of such experience without the degree requirement, within the past seven years. The exam is 130 multiple-choice questions over three hours, and the credential requires recertification every three years. This is what a career IRB administrator or senior compliance-office staff member pursues — it is not what a principal investigator or study coordinator needs to conduct or staff a study.
- PRIM&R also administers a parallel credential, Certified Professional in IACUC Administration (CPIA®), for the animal-care-and-use-committee side of research oversight — worth noting only because the naming pattern is easy to confuse with CIP, but CPIA governs animal research administration, not human-subjects IRB work.
Neither of these is what an institution’s IRB office means when it tells a new investigator “you need to be IRB certified before you can submit.” That instruction refers to the training-completion requirement covered above, not to CIP.
IRB “certification” vs. IRB accreditation: two different levels entirely
A separate and frequently conflated concept is institutional accreditation of an entire Human Research Protection Program (HRPP), which operates at the organizational level, not the individual level. The Association for the Accreditation of Human Research Protection Programs (AAHRPP) is the principal accrediting body in this space: an independent, non-profit organization, founded in 2001 by a coalition of research and academic-medicine associations, that reviews an institution’s HRPP as a whole — its IRB(s), policies, procedures, and practices — against its own standards and awards voluntary accreditation to organizations that meet them. AAHRPP accreditation is sometimes referred to informally as a “gold seal” for an institution’s human-subjects protections program.
The distinction that matters practically:
- Individual training completion (what most people mean by “IRB certification”) — a person completes required coursework; tracked per-person, required before that person can participate in human-subjects research at their institution.
- Individual professional credential (CIP) — a tested, recertified credential a career IRB professional earns; optional, career-oriented, not a prerequisite for conducting research.
- Institutional accreditation (AAHRPP) — a voluntary review of an entire institution’s HRPP; the unit of accreditation is the organization, not a person, and it says nothing about whether any specific individual has completed training.
An institution can require rigorous individual training and still not be AAHRPP-accredited, and vice versa — the two are independent, though institutions that pursue AAHRPP accreditation typically already have well-documented individual training requirements as part of what AAHRPP reviews.
Frequently asked questions
Does IRB certification expire?
Individual training-completion records (CITI or equivalent) typically require renewal on an institution-set schedule, commonly every 3 years, though the exact interval and which modules must be refreshed varies by institution and by the specific curriculum. The CIP professional credential separately requires recertification every three years. There is no single federally-mandated expiration interval for either.
Is my IRB certification from one university valid at another?
The underlying training record can often be affiliated with a new institution’s CITI subscription without retaking identical coursework, but the receiving institution’s HRPP office typically requires you to complete any institution-specific modules and confirm the training satisfies its own current policy before it will accept you onto a study. Treat “portable” as “usually reduces the work, rarely eliminates it entirely.”
Do I need IRB certification if my study is exempt from IRB review?
Most institutions still require the underlying human-subjects-protection training even for research that ultimately qualifies for exempt review, because someone has to make and document that exemption determination correctly, and the training covers the concepts (risk, vulnerable populations, consent) that determination depends on. Check your institution’s specific policy — exemption from full IRB review is not automatically exemption from the training requirement.
What’s the difference between IRB certification and GCP certification?
Human-subjects-protection training (the “IRB certification” this page covers) is the baseline requirement for anyone conducting human-subjects research. Good Clinical Practice (GCP) training is an additional, separate requirement layered on top for FDA-regulated trials and NIH-funded clinical trials specifically. See CASRAI’s GCP Certification guide for how the two requirements stack.
