Skip to Content

Certified in Risk and Information Systems Control CRISC

The CRISC training covers the 4 domains of the Certified in Risk and

Information Systems Control (CRISC) exam and provides the necessary knowledge for obtaining the CRISC certification. Since its creation in 2010, the CRISC certification is aimed at IT professionals responsible for identifying business risks and managing risks through the development, implementation, and maintenance of appropriate information systems controls. The course consists of about 2 days of theoretical content review with detailed course materials followed by about

3 days of practice exams on a set of 800 questions, with answers and explanations for each response.

0.000 DT 0.000 DT
  • Review the points of the ISACA Common Body of Knowledge (CBK)

  • Understand the terminology, concepts, and principles of risk management

  • Understand the registration process for the CRISC certification

  • Acquire the appropriate review method to successfully pass the certification

To fully benefit from this training, participants must have a basic experience in risk management.

  • The CRISC certification enables IT professionals to meet the unique challenges of IT and enterprise risk management, positioning them to become strategic partners of the business.

  • This training is aimed at all IT professionals, and more specifically at security specialists, Business Analysts, project managers, and compliance officers in the enterprise.

The course consists of a maximum of 2 days of theoretical content review with detailed course materials followed by a minimum of 3 days of practice exams on a set of 1177 questions, with answers and explanations for each response.

Detailed program

  • Introduction to CRISC

  • Identification of IT risks

  • Risk assessment

  • Risk response and mitigation

  • Monitoring and reporting

  • Review and preparation for certification

Certification

This training prepares for the CRISC certification – Certified in Risk and Information Systems Control. The exam is taken later.

  • Number of questions: 150

  • Duration: approximately 4 hours

  • Knowledge areas:

    • Identification of IT risks

    • Assessment of IT risks

    • Response and mitigation or reduction of risks

    • Monitoring and reporting of controls and risks

  • The CRISC exam is offered three times a year.