CRISC
Complete resources to ensure you achieve and maintain your CRISC qualification
Awarded by ISACA®, the Certified in Risk and Information Systems Control (CRISC) qualification is awarded to IT professionals who identify and manage risks through the development, implementation and maintenance of information systems (IS) controls.
IT Governance offers a complete range of products, which are designed to help you pass the CRISC examination at the very first attempt.
Studying for the Certified in Risk and Information Systems Control (CRISC) examination
Our complete range of CRISC study guides:
- CRISC Exam Passport
- CRISC Review Manual, 6th Edition
- CRISC Review, Questions, Answers and Explanations Manual, 4th Edition
- Other CRISC exam guides
What are the requirements for the CRISC qualification?
The Certified in Risk and Information Systems Control (CRISC) qualification is awarded to candidates with at least three years of relevant work experience who pass a rigorous written examination.
ISACA defines four CRISC domains on which you will be examined:
-
Domain 1—IT Risk Identification (27% of exam)
-
Domain 2—IT Risk Assessment (28% of exam)
-
Domain 3—Risk Response and Mitigation (23% of exam)
-
Domain 4—Risk and Control Monitoring and Reporting (22% of exam)
For more information, please see the official ISACA ‘How to Become CRISC Certified’ web page.
How do you pass the CRISC exam at the first attempt?
We recommend the following actions:
- Check that you have the relevant three years of work experience to qualify.
- Register and schedule your exam direct with ISACA.
- Purchase the official ISACA study guides and textbooks.
- Plan a self-study programme that covers all the key knowledge domains.
- Attend an exam preparation training course a few days before you sit the exam.
How to register and schedule the CRISC exam
From 2017, the CRISC exam will be offered via a computer-based testing (CBT) session, which is available during three testing windows per year. All candidates must first register online direct with ISACA and pay for the examination in advance. They will then receive email instructions on how to schedule an exam appointment at a local PSI exam centre. For the May-June 2017 window only, this notification will be delayed until 15 February 2017 for anyone who purchases prior to this date.
For further information, please review the ISACA Exam Candidate Information Guide for 2017 Exams.
Essential CRISC books and study guides
As preparation is the essential ingredient to passing the CRISC examination, we strongly recommend that all delegates purchase the CRISC Exam and Study Guides prior to taking the relevant course. All titles are available from our dedicated ISACA Certification Bookstore.
We particularly recommend that you purchase the Official CRISC Exam Passport package, which contains copies of the CRISC Review Manual, 6th Edition and CRISC Review Questions, Answers and Explanations Manual, 4th Edition.
Continuing Professional Education (CPE)
There is a Continuing Professional Education (CPE) policy in respect of qualified CRISC professionals. The goal of this policy is to ensure that all CRISCs maintain an adequate level of current knowledge and proficiency in the field of information systems audit, control and security. CRISCs who successfully comply with the ‘continuing professional education policy will be better trained to assess information systems and technology and provide leadership and value to their organizations.’ The responsibility for setting the continuing professional education requirements rests with the CRISC Certification Board, which oversees the continuing professional education process and requirements to ensure their applicability.
Maintenance fees and a minimum of 20 contact hours of CPE are required annually. In addition, a minimum of 120 contact hours are required during a fixed three-year period. Please see the Maintain Your CRISC page on the ISACA website for further details.
Speak to an expert
Please contact our team for advice and guidance on our CRISC products and services.