CRISC (Certified in Risk and Information Systems Control) Requirements & Prerequisites
Everything you need to know before registering for the CRISC (Certified in Risk and Information Systems Control), eligibility, cost, format, and what to expect on exam day.
Cost
$575-$760
Provider
ISACA
Validity
3 years (40 CPE/year)
Available
Global
Education
Check official exam requirements
Experience
1-3 years of hands-on experience recommended
Specific Requirements
- There are no prerequisites to sit the exam. ISACA states the CRISC exam is open to anyone with an interest in information security, and you may take it before meeting the experience requirement.
- To become certified you need three or more years of professional work experience across at least two of the four CRISC domains.
- That experience must have been gained within the ten-year period preceding your certification application date and must be verified by a supervisor or manager.
- ISACA allows no experience waivers or substitutions for CRISC. This differs from CISA, where up to three years may be waived, and CISM, where up to two years may be waived.
- You must pay a one-time US$50 application processing fee and submit the application within five years of your passing date.
- You must agree to ISACA's Code of Professional Ethics and the Continuing Professional Education policy.
Number of Questions
150 questions
Duration
4 hours (240 minutes)
Question Format
Multiple-choice with one best answer, each item having a stem and four options, Scenario-based sets where one described situation supports two or more linked questions, Unscored pretest items mixed into every form and not identified to the candidate
Passing Requirement
450 on a scaled range of 200 to 800
How It Is Delivered
Computer-based at an authorized PSI testing centre or as a remotely proctored online exam. Registration is continuous and appointments can be scheduled as early as 48 hours after payment.
Languages Offered
English, Spanish, Japanese
Visit the official ISACA certification page
Create an account and select your exam
Choose a test center or online proctoring option
Pay the exam fee and schedule your date
- Two forms of valid ID (one government-issued with photo)
- Appointment confirmation email
- For online proctoring: webcam, microphone, clean desk, stable internet
What are the prerequisites for the CRISC (Certified in Risk and Information Systems Control)?
There are no prerequisites to sit the exam. ISACA states the CRISC exam is open to anyone with an interest in information security, and you may take it before meeting the experience requirement.. To become certified you need three or more years of professional work experience across at least two of the four CRISC domains.. That experience must have been gained within the ten-year period preceding your certification application date and must be verified by a supervisor or manager.. ISACA allows no experience waivers or substitutions for CRISC. This differs from CISA, where up to three years may be waived, and CISM, where up to two years may be waived.. You must pay a one-time US$50 application processing fee and submit the application within five years of your passing date.. You must agree to ISACA's Code of Professional Ethics and the Continuing Professional Education policy..
How much does the CRISC (Certified in Risk and Information Systems Control) cost?
The CRISC (Certified in Risk and Information Systems Control) exam costs $575-$760. This includes the exam fee only, study materials are additional.
How do I register for the CRISC (Certified in Risk and Information Systems Control)?
Visit the official ISACA certification page → Create an account and select your exam → Choose a test center or online proctoring option → Pay the exam fee and schedule your date
What should I bring to the CRISC (Certified in Risk and Information Systems Control)?
Two forms of valid ID (one government-issued with photo). Appointment confirmation email. For online proctoring: webcam, microphone, clean desk, stable internet.
Ready to prepare for CRISC (Certified in Risk and Information Systems Control)?
Get the complete exam guide with study plan, tips, and practice questions.
View CRISC (Certified in Risk and Information Systems Control) Guide