Certified in Risk and Information Systems Control (CRISC)
Credential: Certified in Risk and Information Systems Control (CRISC)
Credentialing Agency: ISACA
Renewal Period: 3 years
The ISACA, Certified in Risk and Information Systems Control (CRISC) certification is for individuals experienced in the management of IT risk and the design, implementation, monitoring and maintenance of IS controls. CRISC candidates must have a minimum of at least three years of cumulative work experience performing the tasks of a CRISC professional across at least two of the four CRISC domains. Candidates must also pass a written exam.
More information can be found on the certifying agency's website.
Certified in Risk and Information Systems Control (CRISC)
The following DOD Civilian Occupations provide training and/or experience that contributes to attaining this credential:
The following Federal Occupations provide training and/or experience that contribute to attaining this credential:
| Federal Occupation | Related As | |
|---|---|---|
| 0511 Auditing Series |  Other |
The following civilian occupations are related to this credential:
| Civilian Job | Bright Outlook | Registered Apprenticeship | Local Salary Info | |
|---|---|---|---|---|
| Computer and Information Systems Managers |  Bright Outlook |
 Apprenticeship |
 find local salary |
|
| Computer Systems Analysts | Apprenticeship |
find local salary |
||
| Computer Systems Engineers/Architects | find local salary |
|||
| Information Security Analysts | Bright Outlook |
Apprenticeship |
find local salary |
|
| Information Technology Project Managers | find local salary |
|||
| Network and Computer Systems Administrators | Apprenticeship |
find local salary |
||
| Operations Research Analysts | Bright Outlook |
find local salary |
MINIMUM REQUIREMENTS
Eligibility Requirements (View Details)
- Credential Prerequisite
- Experience: 3 years
- Education
- Training
- Membership
- Other
- Fee
Note: This credential may have multiple options for becoming eligible. Listed are the minimum requirements based on the minimum degree required. To view other options, see the Eligibility tab.
Exam Requirements (View Details)
- Exam
- Written Exam
- Oral Exam
- Practical Exam
- Performance Assessment
RECERTIFICATION SUMMARY
Renewal Period: 3 years
AGENCY CONTACT INFORMATION
ISACA
3701 Algonquin Road
Suite 1010
Rolling Meadows, IL 60008
Phone: 847-660-5505
Fax: (847) 253-1443
Contact Page
Experience REQUIREMENTS
Candidates must have a minimum of at least three years of cumulative work experience performing the tasks of a CRISC professional across at least two of the four CRISC domains required for certification. Of the two required domains, one must be in either Domain 1 or 2. There are no substitutions or experience waivers.
Note: Experience must have been gained within the 10-year period preceding the application date for certification or within five years from the date of initially passing the examination.
Other REQUIREMENTS
The Certified in Risk and Information Systems Control (CRISC) credential has the following other requirements:
- Candidates must adhere to the ISACA Code of Professional Ethics.
Written Exam
- IT Risk Identification (27%)
- IT Risk Assessment (28%)
- Risk Response and Mitigation (23%)
- Risk and Control Monitoring and Reporting (22%)
Exam Preparation Resources
There are a number of resources available to help you prepare for the Certified in Risk and Information Systems Control (CRISC) examination:
- Best Sources
- General References
Testing Information
Testing for this credential is handled by PSI. The test centers are located in the U.S.
To find out more, use the following links on the PSI website:
For more information on the ISACA testing process, visit the agency website.
RECERTIFICATION
Certified in Risk and Information Systems Control (CRISC)
Renewal Period: 3 years
MOST
SOME