Certified in Risk and Information Systems Control (CRISC)

CRISC from ISACA validates expertise in IT risk management and controls. Designed for mid-level professionals, it helps career changers break into cybersecurity, risk management, and IT governance roles you'll find in high demand.

Issued by ISACA
Certified in Risk and Information Systems Control (CRISC) certification logo

Certification Requirements


Exam Required: Yes
Difficulty: Intermediate
Prerequisites:
  • 3 years of work experience performing the tasks of a CRISC professional across at least two of the four CRISC domains, one of which must be Domain 1 or 2
  • Work experience must be within the past 10 years.
Additional Info:
  • To maintain certification, complete at least 20 continuing professional education credits annually and a total of 120 credits over a 3-year period.

Topics covered by Certified in Risk and Information Systems Control (CRISC)

The certification validates that you have the core skills necessary for a career in IT risk management and information systems control.


Job Opportunities with a ISACA Certified in Risk and Information Systems Control (CRISC) Certification

CRISC certification unlocks high-paying cybersecurity and risk management roles across industries, including:

IT Risk Manager

IT Risk Managers identify, assess, and mitigate technology-related risks within organizations. They develop security policies, ensure regulatory compliance, and protect businesses from cyber threats and data breaches.

Estimated Salary: $95,000 – $140,000

Information Security Analyst

Information Security Analysts protect organizations from cyber threats by monitoring networks, investigating security breaches, implementing protective measures, and developing security policies to safeguard sensitive data and systems.

Estimated Salary: $103,000 – $165,000

Risk Management Consultant

Risk Management Consultants help organizations identify, assess, and mitigate potential threats to their business operations, financial stability, and reputation through strategic planning and comprehensive risk analysis frameworks.

Estimated Salary: $75,000 – $150,000

Frequently Asked Questions

Is the CRISC certification worth it for career advancement?

Yes, CRISC certification significantly boosts career prospects in IT risk management, often leading to higher salaries and senior roles in cybersecurity, compliance, and enterprise risk management across industries.

How much does it cost to get CRISC certified?

CRISC certification costs around $760 for ISACA members or $1,520 for non-members, plus study materials.

How hard is the CRISC exam to pass?

The CRISC exam is moderately challenging with a 60-70% pass rate. Success requires dedicated study of 150-200 hours covering risk management frameworks, IT controls, and governance. Most candidates need 3-4 months of preparation using official study materials and practice exams to pass.

Get Free Bootcamp Advice

Sign up for our newsletter and receive our free guide to paying for a bootcamp.

By submitting this form, you agree to receive email marketing from Course Report.

Get Matched in Minutes

Just tell us who you are and what you’re searching for, we’ll handle the rest.

Match Me