CRISC (Certified in Risk and Information Systems Control)
CRISC centers on identifying and managing IT risk by designing, implementing, monitoring and maintaining IS controls. ISACA aims it at IT and business professionals in risk and compliance roles, business analysts and project managers.
Exam Details
Computer-based exam with scaled scoring, taken at PSI test centers or through remote proctoring.
Non-member price. ISACA members pay US$575. A one-time US$50 application processing fee is due after passing.
Requirements and Renewal
Prerequisites
Three or more years of IT risk management and IS control experience across at least two of the four CRISC domains, gained within the 10 years before applying. ISACA allows no waivers or substitutions.
Renewal
20 CPE hours each year and 120 CPE hours per three-year period, plus an annual maintenance fee of US$45 (members) or US$85 (non-members), reduced to US$25/US$50 for a third or later ISACA certification.
Current Version
CRISC 2025 exam content outline, in effect since Nov 3, 2025.
Exam Domains
4 domains| Domain | Weight |
|---|---|
| Governance | 26% |
| Risk Assessment | 22% |
| Risk Response and Reporting | 32% |
| Technology and Security | 20% |
Comparisons
Certification Lists
Related Tool Categories
Frequently Asked Questions
How much does a CRISC cert cost?→
The exam costs US$575 for ISACA members and US$760 for non-members. A US$50 application fee follows a pass, and keeping the credential costs US$45 or US$85 a year.
Which is better, CISA or CRISC?→
They target different roles. CRISC centers on IT risk and control with a three-year experience requirement, and CISA centers on IS audit with a five-year requirement.
Did the CRISC exam change recently?→
Yes. An updated CRISC exam became available on 3 November 2025. The four domains stayed, Risk Assessment rose to 22 percent and Technology and Security fell to 20 percent.
Can CRISC experience be waived?→
No. ISACA states that CRISC has no experience waivers or substitutions.
Sources
Exam details are checked against official ISACA pages. Fees, exam versions, and renewal rules change; confirm with ISACA before registering. CRISC is a trademark of its owner. This site is not affiliated with or endorsed by ISACA.