ISACACertified in Risk and Information Systems Control® (CRISC®)
Certified in Risk and Information Systems Control (CRISC) validates your ability to identify, assess and respond to IT risk, and to design and monitor the controls that manage it. It suits risk managers, IT and business control professionals, and security and compliance leaders.
The CRISC exam is a multiple-choice test covering governance, IT risk assessment, risk response and reporting, and information technology and security. Certification also requires verified experience in IT risk management and control, and preparation uses domain-focused review, scenario questions and timed practice to build exam readiness.
Your path to certification
Prepare
Start from where you are; we help you assess your level.
Train
1 course with an instructor
Sit the exam
The awarding body's exam
Stay current
Report at least 20 CPE hours each year, 120 over three years, and pay the annual maintenance fee.
Where do you sit the exam? Online exam
ISACA exams are delivered by PSI, through remote online proctoring or PSI test centres, not at our centre. We prepare you for the exam and help you register through ISACA's official route.
Preparation courses
Renewal and validity
ISACA requires a minimum of 20 CPE hours annually and 120 hours across each three-year reporting period, all relevant to CRISC, together with an annual maintenance fee and adherence to its Code of Professional Ethics; reported hours may be audited. ISACA revises its CPE policy from time to time, so check its current requirements to keep your designation in good standing.
Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.