The Certified in Risk and Information Systems Control (CRISC) course is designed for IT professionals who are focused on enterprise risk management and control. This certification course provides the knowledge necessary to understand and manage the ongoing challenges of enterprise risk and design information system controls. It is ideal for those looking to strengthen their current career or advance to a higher position within the field of information systems and technology risk management.
Participants of this course will gain a comprehensive understanding of risk management processes and the impact of IT risks on overall business goals. The course also equips professionals with the strategies needed to govern and control enterprise IT and perform effective risk assessments. This is crucial for anyone responsible for managing risks, designing, and managing control measures within their organization.
Target audience:
IT professionals in charge of risk management systems
Project managers dealing with security and risk assurance
Compliance professionals ensuring regulatory standards
Information Security managers and officers
Enterprise governance personnel
Information system control auditors
CRISC® is an internationally recognized ISACA certification for professionals who manage IT risks and design, implement, and evaluate information system (IS) controls. The exam covers four domains (Governance, Risk Assessment, Risk Response & Reporting, Technology & Security) and is practice-based – 150 questions in four hours, with scores reported on a scale of 200–800; a score of 450+ is required to pass.
In order to obtain certification in risk management and information systems (CRISC), applicants must first have at least three years of experience in IT risk management and information systems (IS). In addition, they must have experience in two areas covered by CRISC domains, including one between risk identification and risk assessment.
150 questions
4 hours
Minimum pass score: 450 points