Instructor-Led
Training
ISACA CRISC Training
The ISACA Certified in Risk & Information Systems Control (CRISC) certification is a globally recognized credential that validates expertise in enterprise risk management, IT risk assessment, and information systems control. It is designed for IT professionals and risk management experts responsible for identifying and mitigating risks in an organization.
Course Overview
Risk Identification, Assessment, and Evaluation
Understanding enterprise risks and their potential impact, including how to identify, assess, and evaluate them effectively.
Risk Response and Mitigation
Implementing strategies to manage and control IT risks, ensuring the organization’s security posture remains strong.
Control Monitoring and Reporting
Developing risk metrics, audits, and control assessments to ensure risk is being managed effectively across the organization.
Governance and Compliance
Ensuring adherence to regulatory and legal frameworks, ensuring that risk management aligns with industry standards and laws.
IT Risk Frameworks
Utilizing industry standards such as NIST, COBIT, and ISO 27001 for managing and mitigating IT risks within the organization.
IT risk professionals responsible for managing enterprise risk
These professionals oversee the identification and management of risks in an organization’s IT operations.
Security managers and compliance officers overseeing risk frameworks
Those responsible for developing, implementing, and ensuring compliance with risk management frameworks.
IT auditors, governance professionals, and business analysts
Professionals focused on evaluating, analyzing, and ensuring the effectiveness of IT governance, risk, and controls.
Information security professionals aiming for leadership in risk management
Individuals who want to advance their knowledge and expertise in managing IT-related risks at a leadership level.
Individuals seeking to obtain a globally recognized risk management certification
Ideal for professionals who want to formalize their expertise in risk management with the CRISC certification.
Online Instructor-Led Training
Learn from risk management professionals.
Intensive Training Course
Covers governance, risk response, and control frameworks.
90-Day Access to Course Content
Reinforce knowledge with digital course materials.
Prerequisites
Work Experience
A minimum of three years of work experience in IT risk management and information systems control. Experience must be verified based on ISACA’s certification requirements.
Certification Process
Candidates can take the CRISC exam before meeting the experience requirement and apply for certification once the experience is met.
Governance
Establishing and maintaining governance frameworks, risk culture, and risk appetite.
IT Risk Assessment
Identifying, analyzing, and prioritizing IT risks within an organization.
Risk Response and Mitigation
Developing and implementing risk response strategies and controls.
Risk and Control Monitoring and Reporting
Tracking key risk indicators (KRIs) and ensuring continuous monitoring.
| Description | Certified in Risk and Information Systems Control |
|---|---|
| Experience Required | Three (3) or more years of experience in IT risk management and IS control. No experience waivers or substitutions. |
| Domain |
|
| Exam Languages | Chinese Simplified, English, Spanish, Korean |
| Exam Length | 4 hours (240 minutes), 150 multiple choice questions |