Certified in Risk and Information Systems Control® (CRISC®)

Our Certified in Risk and Information Systems Control certification demonstrates expertise in the identification and management of enterprise IT risk as well as the implementation and maintenance of information systems controls. With CRISC, you'll advance your profession while gaining immediate reputation and respect. CRISC can provide you the advantage you need to develop in your career if you are an IT professional in your mid- to late-career who is focused on IT and cyber risk and control.

Potential Candidates Should be Competent in the Following Four Domains:

  • Governance (26%)
  • IT Risk Assessment(20%)
  • Risk Response and Reporting (32%)
  • Information Technology and Security (22%)

Experience Requirements

  • Three (3) or more years of CRISC professional work experience in two of the four CRISC domains.

Steps to Achieve Your Certified in Risk and Information Systems Control (CRISC)

  1. Attend Certified in Risk and Information Systems Control (CRISC).
  2. Pass the Certified in Risk and Information Systems Control (CRISC) exam.
  3. Complete the application process and get your experience verified by a supervisor or manager by signing the Experience Verification Form included in the application. For more information visit ISACA.

CRISC Certification Courses

Certified in Risk and Information Systems Control (CRISC)

This course is designed for those experienced with risk identification, assessment, and evaluation; risk response; risk monitoring; information systems control design and implementation.

Enroll Now
3 Days | $2037

CRISC Exam Candidate Guide

Maintain Your CRISC Certification

  • In order for your CRISC to stay current you must earn Continuing Professional Education (CPE) credits. Maintaining your CRISC requires earning a minimum of 20 CPEs annually and a total of 120 CPEs over a 3-year period.

You can earn CPEs through a variety of different programs and events such as online training, webinars, conferences, and more. Visit ISACA's website to learn more.