Overview

The Certified in Risk and Information Systems Control (CRISC) certification is offered by ISACA, and it's designed for professionals who manage risk and design and implement information system controls. CRISC is globally recognized and demonstrates your ability to identify and manage enterprise IT risk and implement and maintain information systems controls.CRISC OverviewFocus Areas: IT risk management, control monitoring, governanceTarget Audience:IT risk professionalsControl professionalsProject managersCompliance professionalsSecurity professionalsCRISC Domains (as of 2024)GovernanceOrganizational governanceRisk governance and frameworksIT Risk AssessmentRisk identificationRisk analysis and evaluationRisk Response and ReportingRisk treatment plansMonitoring and reporting of risksInformation Technology and SecurityControls and countermeasuresAssurance and oversight of risk managementEligibility RequirementsThere are no prerequisites to take the CRISC exam. However, to become certified, you must:Pass the CRISC examHave at least 3 years of work experience in at least two CRISC domains (one must be either Governance or IT Risk Assessment)Submit a completed application within 5 years of passing the examExam DetailsFormat: Multiple-choiceQuestions: 150Duration: 4 hoursDelivery: Online (remote proctored) or at a testing centerPassing Score: 450 out of 800Languages: English (other languages may be supported)MaintenanceCertification is valid for 3 yearsRequires earning 20 CPEs (Continuing Professional Education hours) annually (and 120 CPEs over 3 years)Pay annual maintenance fee to ISACABenefits of CRISC CertificationIndustry-recognized validation of IT risk management expertiseEnhances credibility with employers and clientsBoosts career opportunities in risk management, governance, and complianceAligns with frameworks such as COBIT, NIST, ISO 27001

Skills

Reviews