Stay One Step Ahead of Real World Threats
ISACA CRISC Online Training
Certified in Risk & Information Systems Control
Training Course Highlights
32-Hour Instructor-led Online Training
ISACA Premium Training Partner
Learn with Practical Approach
Extended Post-Training Support Till Exam
Certified Trainers
Scenario-based Learning
Online Test Simulation
98% Pass Rate
* Conditions Apply
CRISC Certification - An Overview
Certified in Risk & Information Systems Control or CRISC Certification is the latest and the most valuable credential available to evaluate the information systems control and risk management proficiency of an IT professional. Those who earn CRISC help enterprises understand business risks and have the technical knowledge to implement appropriate IS controls.
Course Curriculum
- Domain 1: Governance 26%
- Part A: Organizational Governance
- Strategy, Goals, and Objectives
- Organizational Structure, Roles, and Responsibilities
- Organizational Culture and Ethics
- Policies and Standards
- Business Processes and Resilience
- Organizational Asset Management
- Part B: Risk Governance
- Enterprise Risk Management
- Lines of Defense
- Risk Profile
- Risk Appetite and Risk Tolerance
- Risk Frameworks, Legal, Regulatory, and Contractual Requirements
- Part A: Organizational Governance
- Domain 2: IT Risk Assessment 22%
- Part A: Risk Identification
- Risk Events
- Threat Modeling and Threat Landscape
- Vulnerability Management
- Risk Scenario Development and Evaluation
- Part B: Risk Analysis
- Risk Assessment Concepts and Standards
- Business Impact Analysis (BIA)
- Risk Register
- Risk Analysis Methodologies
- Inherent, Residual, and Current Risk
- Part A: Risk Identification
- Domain 3: Risk Response and Reporting 32%
- Part A: Risk Response
- Risk Response Options
- Risk and Control Ownership
- Vendor/Supply Chain Risk Management
- Issues, Findings, Exceptions, and Exemptions Management
- Part B: Control Design and Implementation
- Control Frameworks, Types, and Standards
- Control Design, Selection, Implementation, and Analysis
- Control Testing Methodologies
- Part C: Risk Monitoring and Reporting
- Risk Action Plans
- Data Collection, Aggregation, Analysis, and Validation
- Risk and Control Metrics
- Risk and Control Monitoring and Reporting Techniques
- Monitoring and Reporting of Emerging Risks
- Part A: Risk Response
- Domain 4 : Information Technology and Security 20%
- Part A: Information Technology Principles
- Technology Roadmaps and Enterprise Architecture (EA)
- Operations Management
- System Development Life Cycle (SDLC)
- Data Lifecycle Management
- Portfolio and Project Management
- Technology Resilience and Disaster Response/Recovery
- Emerging Technologies
- Part B: Information Security Principles
- Security Concepts, Frameworks, and Standards
- Security/Risk Awareness and Training
- Data Privacy and Data Protection Principles
- Part A: Information Technology Principles
Course Objectives
- Identify the IT risk management strategy in support of business objectives and alignment with the Enterprise Risk Management (ERM) strategy.
- Analyze and evaluate IT risk to determine the likelihood and impact on business objectives to enable risk-based decision making.
- Determine risk response options and evaluate their efficiency and effectiveness to manage risk in alignment with business objectives.
- Continuously monitor and report on IT risk and controls to relevant stakeholders to ensure the continued efficiency and effectiveness of the IT risk management strategy and its alignment with business objectives.
Target Audience
- CEOs/CFOs
- Chief Audit Executives
- Audit Partners/Heads
- CIOs/CISOs
- Chief Compliance/Privacy/Risk Officers
- Security Managers/Directors/Consultants
- IT Directors/Managers/Consultants
- Audit Directors/Managers/Consultant
Pre-requisites
- A minimum 3 years of work experience across at least two of the four CRISC domains.
- Pass the CRISC Exam within the last five years.
Exam Details
| Certification | Certified in Risk and Information Systems Control |
| Exam Duration | 240 minutes |
| Number of Questions | 150 |
| Exam Pattern | Multiple Choice |
| Passing Marks | 450 out of 800 |
| Languages | English, French, German, Hebrew, Italian, Japanese, Korean, Spanish, Turkish, Chinese |
CRISC Training Calendar
Can't Find a Suitable Schedule? Talk to Our Training Advisor!
Choose Your Preferred Learning Mode
1-TO-1 TRAINING
- Customized Schedule
- Learn at Your Dedicated Hour
- Instant Clarification of Doubts
- Guaranteed to Run
ONLINE TRAINING
- Flexible, Convenient & Time Saving
- Highly Interactive
- Affordable Yet Effective
- Guaranteed to Run
CORPORATE TRAINING
- Anytime, Anywhere - Across The Globe
- Hire a Trainer
- Your Schedule, Your Pace
- Customized for Your Team
Our Expert Course Advisors
Why Choose InfosecTrain?
Learn from certified trainers and industry experts
Practice with case studies, flash cards, mind maps & quizzes
Immerse in scenario-based learning across domains
Best Quality Training with Best Price Guarantee
Conquer the exam and achieve success in the very first attempt
Prepare to excel with mock tests, exam tips, and real-world examples
Updated curriculum aligned with the latest updates
Choose Flexible Learning options including weekend batches
Benefits of CRISC Certification Training
Get global recognition
Maximize your earning potential
Earn the status of a Risk Management & IT Governance expert
Advanced career growth
Become a part of an esteemed community
Average salary range for different CRISC profiles
Confused if this is the right course for you?
Words Have Power
It was an excellent experience with the CRISC course. The instructor was extremely knowledgeable and supportive, with an exceptional understanding of the subject matter. They explained concepts in a simple and clear way. The salesperson was also very helpful and responsive to all my requests.
Tom Ndip
United StatesThe CRISC online training program was informative and highly valuable. The instructor was very knowledgeable and engaging. The discussions really enhanced my learning. I highly recommend this course to others looking to strengthen their skills.
Ahmad Al-Tayyeb
JordanThe CRISC training was excellent, well-paced and focused on core concepts. The live scenario discussions really helped in understanding the topics better.
Rajesh Vasukuttan Nair
QatarThe CRISC training was helpful in understanding key concepts clearly and effectively.
Akshaya Pushpangathan
KuwaitThe CRISC training was really good! The trainer is excellent, and the materials were easy to read and understand. Happy to be part of the InfosecTrain team, looking forward to learning more!
Geetha Muralidharan
IndiaSuccess Speaks Volumes
Get a Sample Certificate
Frequently Asked Questions
How long is the CRISC Exam?
Where can I take the CRISC Exam?
- Computer-Based Testing Locations.
- CRISC exams are administered at 1,300 PSI locations across the world and in ten languages.
Can I review answers before the end of the test?
Yes, answers can be reviewed. Flag questions you want to review before your exam time is over.
When will I receive my exam results?
- Preliminary results (pass or not pass) is available on the screen immediately after the completion of your exam.
- Official scores will be emailed and available online within 10 business days from the date that candidates take the exam.
- Successful candidates receive details on how to apply for certification.
- The result is not available on phone or fax to maintain privacy.
Do I need to apply for another exam voucher if I need to retake the exam?
What are the eligibility requirements for CRISC Certification?
- Pass the CRISC Exam within the last 5 years.
- Work experience must be gained within the 10-year period preceding the application date for certification or within five years from the date of initially passing the exam.
- A minimum of three years of cumulative work experience as a CRISC professional across at least two of the four CRISC domains is compulsory.
- Of these two (2) required domains, one (1) must be in either Domain 1 or 2.
- Submit the CRISC Certification Application, including Application Processing Fee
For more information please visit
https://www.isaca.org/credentialing/crisc/get-crisc-certified
What qualifications are required to earn the CRISC Certification?
- Pass the CRISC examination
- Submit an application for CRISC certification
- Adherence to the Code of Professional Ethics
- Adherence to the Continuing Professional Education Program
- Compliance with the Information Systems Auditing Standards
Who is eligible to become CRISC Certified, and what makes CRISC unique?
- CRISC certification indicates expertise in identifying and managing enterprise IT risk and implementing and maintaining information systems controls.
- Gives access to the ISACA global community of knowledge, including the most current ideas regarding IT risk management.
- It enables the candidates to increase their value in the organization with expertise to manage IT risk.
- IT professionals working to manage company risks and controls and have the required experience can apply for the certification.
What are the languages in which this exam is available?
Can I take the CRISC, CISA, CISM, and CGEIT exams in the same exam window?
- Yes, candidates are allowed to take one each of CRISC, CISA, CISM, and CGEIT within the same window.
- Candidates may NOT take the same certification exam more than one time within a window.
Where can I find the application for CRISC certification?
CRISC application is available on the ISACA website
https://www.isaca.org/credentialing/crisc/get-crisc-certifiedHow can I schedule the CRISC exam?
- Candidates can register online anytime for the CRISC certification exam.
- Registration and payment will be valid for 365 days/12 months from the date of online registration.
- Payment is mandatory before scheduling the exam.
- Candidates can schedule their exam for any available date/time/location within their 365-day eligibility period.
- The Exam can be rescheduled within 365 days of eligibility period. But it must be done more than 48 hours prior to the originally scheduled testing appointment.
- Candidates must take the exam if they are within 48 hours of the scheduled testing appointment, or their registration fee will be forfeited.
What are the Prerequisites for CRISC certification?
- A minimum 3 years of work experience across at least two of the four CRISC domains.
- Pass the CRISC Exam within the last five years.
Is there any waiver for 3 years of experience required for CRISC Certification?
No, there are no substitutions or experience waivers.
What Is The Best Way To Prepare For The Exam?
- CRISC Review Manual, offered by ISACA, has all the relevant course content good enough to help the aspirants to crack the CRISC exam. Make a habit to read it religiously. This manual is treated as the best guide for self-study.
- Practice questions can easily be picked up from ISACA’s Review Questions Database. It is an online source that not only has questions but also answers and explains those answers.
- In addition to these, candidates can join boot camps and online training offered by InfosecTrain for the CRISC Certification exam.
