Certified in Risk and Information Systems Control (CRISC®) course

What will you learn?

This course provides the core CRISC competencies required by professionals planning to sit the CRISC exam and prepares you for the exam systematically and comprehensively. The program mirrors the examination structure and covers four CRISC job practice domains:

• Domain 1 – Governencec (26%)
• Domain 2 – IT Risk Assessment (20%)
• Domain 3 – Risk Response and Reporting (32%)
• Domain 4 – Information Technology and Security (22%)

The percentages indicate the emphasis of questions on the exam paper. During the course, you will cover the following aspects for each Domain:

• Definition
• Objectives
• Task and knowledge statements
• Practice exam questions

The study program includes:

• An initial CRISC knowledge assessment
• Classroom presentations of key topics
• Individual/team exercises and discussion sessions
• Final exam preparation with example practice questions

Who should attend?

• Risk managers.
• Security professionals.
• Security auditors.
• Information security staff.
• Compliance personnel.
• Information security managers.
• CSOs, CISOs and CIOs.
• Information security assurance providers.

This course is designed for IT professionals preparing to take the ISACA Certified in Risk and Information Systems Control (CRISC) examination, which is held in June and December each year. Successful candidates who pass the exam and have at least three years of relevant work experience will be awarded the CRISC qualification.

The CRISC exam

The CRISC examination runs a multiple-choice format and consists of a 4-hour session (240 minutes) with 150 questions. The examination tests the candidate’s knowledge of Information System risk management principles and practices, as well as technical content areas.

• A candidate must receive a score of 450 or higher to pass.
• A score of 800 represents a perfect score with all questions answered correctly.
• A score of 200 represents the lowest score possible and signifies only a small number of questions were answered correctly.

The CRISC exam is not included in this training course and candidates must book their June or December exam session directly with ISACA. My personal training experience shows that delegates have the highest chance of success if they sit the exam approximately two to four weeks after completing the training course.