SUPPORTING PROFESSIONALS AND ORGANIZATIONS ON THEIR JOURNEY TO DIGITAL TRANSFORMATION

Let ISACA’s CRISC demonstrate your ability to identify, evaluate and mitigate enterprise IT risk.
Write your awesome label here.

Position yourself as a strategic partner to your enterprise.

Since its introduction in 2010, more than 26,000 professionals have obtained ISACA®’s Certified in Risk and Information Systems Control™ (CRISC™) certification. The designation demonstrates to employers that the holder is able to identify, evaluate and manage information systems and technology risk, and help enterprises achieve their business objectives.

The first step to becoming CRISC certified is to take and pass the CRISC certification exam. The exam consists of 150 questions covering 4 job practice domains and tests your understanding of the knowledge and practical abilities an expert professional brings to the real-life job practice as it relates to information systems risk and control. Your ability to pass the exam will amount to substantial proof of your own expertise in these practical work-related domains:

Domain 1

Corporate IT Governance

This domain evaluates knowledge of an organization’s business and IT environments, strategic objectives, and how IT risks impact organizational goals. It encompasses Enterprise Risk Management (ERM) and Risk Management Frameworks.
Domain 1 confirms one's ability to identify and align IT risk management with organizational governance, ensuring strategic objectives are supported by robust risk oversight.

Domain 2

IT Risk Assessment

This domain focuses on identifying threats and vulnerabilities affecting people, processes, and technology, and analyzing the likelihood and impact of various risk scenarios.
Domain 2 valuates one's ability to conduct comprehensive risk assessments, identify and prioritize risk factors, and effectively communicate findings to stakeholders.

Domain 3

Risk Response and Reporting

This domain centers on creating and managing risk treatment plans, assessing control effectiveness, and ensuring risk mitigation measures are communicated and monitored effectively.
Domain 3 tests your skills in designing, implementing, and maintaining effective risk response strategies and continuously improving controls to mitigate IT risks.


Empty space, drag to resize

Domain 4

Information Technology & Security

This domain addresses the alignment of business practices with Risk Management and Information Security frameworks, promoting a risk-aware culture, and implementing security awareness training.
Domain 4 tests one's ability to integrate risk management principles into IT security practices, foster organizational awareness, and support compliance with industry standards.
Empty space, drag to resize

See why CRISC is a globally respected and valued certification.

CRISC prepares IT professionals for real-world threats with relevant tools to assess, govern and mitigate risk.

With increasing examples of data breaches and damaged corporate reputations each day, IT risk professionals need to be at the top of their game.
The CRISC designation is designed for IT risk, control and compliance practitioners, business  analysts, project managers and other IT and business professionals. The highly respected certification demonstrates to employers that the holder is able to identify and evaluate IT risk, and help their enterprise accomplish its business objectives. CRISC has received over 15 global recognitions.
Write your awesome label here.

ANSI-Accredited

The American National Standards Institute (ANSI) has accredited the CRISC   certification program under ISO/IEC 17024:2012. ■
Write your awesome label here.

Aligned with Global Frameworks

Aligns with globally accepted frameworks like NIST's Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), and ISO/IEC 27005 for risk management. 
Write your awesome label here.

High-Paying Certification

Skillsoft's 2024 IT Skills and Salary Report lists CRISC among the top-paying IT certifications in the U.S., with an average salary of $165,890.
Write your awesome label here.

Hottest Top IT Certification 

CRISC is featured among JumpCloud's 2024 IT Certification List as one of the top IT certifications in demand, underscoring its relevance in the current job market.

Build your confidence on exam day—with test prep solutions from deltamine.

Gear up for your CRISC certification exam with the most comprehensive, up-to-date study materials and training designed to fit your study needs and schedule. Create your own combination, choose from:

Virtual Instructor-Led Training

Live, interactive sessions with expert instructors for a dynamic learning experience.

On-Demand Review Courses

Flexible online courses available anytime to fit your schedule.

Review Manuals

Print or downloadable materials in multiple languages for comprehensive exam prep.

Q&A Database

12-month access to exam-style questions with detailed explanations.

Plus, exam prep and discussion forums on engage.isaca.org

Deltamine is proud to be an ISACA Accredited Training Partner, recognized for delivering high-quality training that meets ISACA's rigorous standards. Our CISM course is designed by experienced instructors who are experts in the field, ensuring you receive the most current and relevant knowledge to excel in your certification journey.