About ISACA Certified in Risk and Information Systems Control (CRISC) (2022 Update)

This certification from ISACA dives deep into managing the risk of information systems. Get ready to traverse the four domains of the CRISC exam — governance, IT risk assessment, risk response and reporting, and information technology and security. Videos and written study materials teach you each concept, then you participate in review questions and activities for each domain. By the end of this learning path, you’ll be ready to ace the CRISC exam with flying colors.

Who this learning path is for

The CRISC certification is a high-paying credential for mid-level professionals looking to take their careers in IT risk management to the next level. It’s ideal for all types of risk management professionals, as it’s the most respected certification focused on governance, risk and compliance. It can especially benefit:

• Information Risk Analysts and related risk professionals, such as risk managers and cyber risk specialists
• Security Managers and other technical professionals tasked with reducing and organization’s risk
• Members of third-party vendor risk management teams
• Any other professional looking to validate their risk management skills

CRISC applicants must have at least three years of work experience in IT risk management and IS control (acquired within the 10-year window before the exam application date) to qualify.

By the end of this learning path, you will:

• Be on your way to passing your exam and earning a CRISC certification, considered by many to be the top certification for governance, risk and compliance
• Be better prepared to validate to employers your comprehensive knowledge in identifying, assessing and mitigating information security risks at the enterprise level
• Understand governance, covering organizational strategy, structure, policies, standards and processes
• Understand enterprise risk management and relevant legal and regulatory requirements
• Master IT risk assessment, including organizational criteria like structure, policies, architecture and technology, and analyzing how likely a risk is and what impact it might have
• Be able to handle risk response and reporting, including enterprise risk response options and third-party risk management, and designing, implementing, testing and analyzing controls
• Know about enterprise architecture, IT operations management, disaster recovery management, data privacy, data protection and business continuity management