Certified In Risk and Information Systems Control (CRISC) CRISC emphasizes real-world risk management—you’ll learn to identify control gaps that auditors miss, design frameworks that actually function under pressure, and translate compliance requirements into operational changes. The exam drills you on scenarios like data breach response timelines and vendor risk assessments, skills immediately applicable in any organization managing digital assets.
Association of Information Security Professional (AiSP) Certification Exam
Certified In Risk and Information Systems Control (CRISC) Certification Exam
Original price was: $149.00.$124.00Current price is: $124.00.
Certified in Risk and Information Systems Control (CRISC): exam domains and weightings
These are the scored areas the ISACA exam guide publishes for this exam, with the share of the exam each one carries. Weight your revision the same way — the largest domain below is worth several times the smallest.
| Exam domain | Share of exam |
|---|---|
| Governance | 26% |
| IT Risk Assessment | 20% |
| Risk Response and Reporting | 32% |
| Information Technology and Security | 22% |
Exam version: ISACA CRISC job practice · Length: 150 questions · Time: 4 hours · Passing score: 450 / 800
Weightings are taken from the official ISACA exam guide — check the current version here, as exam bodies revise them.
Certified In Risk and Information Systems Control: questions candidates ask
How long do you get per question in Certified in Risk and Information Systems Control (CRISC)?
The ISACA guide allows 4 hours for 150 questions, which works out at roughly 1.6 minutes a question if you answer at an even pace. Timed practice matters more on this one than on an untimed take-home paper.
How does Certified in Risk and Information Systems Control (CRISC) differ from the other ISACA exams here?
We also list Certified Information Security Manager (CISM) (150 questions, pass mark 450 / 800) from ISACA. This one is 150 questions and a pass mark of 450 / 800, and its scored areas are the ones in the table above - they do not overlap exam for exam, so material for one is not a substitute for the other.
Which version of the Certified in Risk and Information Systems Control (CRISC) outline is this written against?
The ISACA CRISC job practice outline published by ISACA. Exam bodies retire and renumber outlines, so check the current one on the ISACA exam page before you book.
The same for every download on this site
Everything here is supplied as a PDF plus a practice-test engine, targeting the 2026 version of the exam objectives. It is an instant digital download - nothing is posted, and the timings are set out on our fulfillment process page.
Payment is one-off. There is no subscription and no renewal fee.
These are study materials, not exam questions supplied by the certifying body, and no pack can guarantee a pass. If a download will not open or does not match what the page described, our refund policy applies - contact us and we will put it right.
Related products
-
Association of Information Security Professional (AiSP) Certification Exam
CREST Practitioner Security Analyst (CPSA) Certification Exam
Original price was: $149.00.$124.00Current price is: $124.00. Add to cart -
Association of Information Security Professional (AiSP) Certification Exam
GIAC Information Security Professional (GISP) Certification Exam
Original price was: $149.00.$124.00Current price is: $124.00. Add to cart -
Association of Information Security Professional (AiSP) Certification Exam
Specialist Diploma in Network Security Certification Exam
Original price was: $149.00.$124.00Current price is: $124.00. Add to cart -
Association of Information Security Professional (AiSP) Certification Exam
CREST Practitioner Intrusion Analyst (CPIA) Certification Exam
Original price was: $149.00.$124.00Current price is: $124.00. Add to cart
