Gain instant recognition and credibility in risk management with the Certified in Risk and Information Systems Control credential.
- Why you should get CRISC certified: Prepares IT professionals like you for real-world threats with relevant tools to assess, govern and mitigate risk.
- Why CRISC matters: The global risk management market size was valued at $7.39 billion in 2019 and is projected to reach $28.87 billion by 2027, growing at a CAGR of 18.7% from 2020 to 2027.
- Who should get CRISC certified: Mid- to high-level professionals with three or more years of experience in the management of IT risk, as well as the design, implementation, monitoring and maintenance of IS controls.
The ISACA CRISC is the only certification that prepares and enables IT professionals for the unique challenges of IT and enterprise risk management, and positions them to become strategic partners to the enterprise.
HRDC Claimable and Malaysian Bumiputeras are eligible for Yayasan Peneraju Financing Scheme. T&C applies.
Overview
The only globally accepted IT risk management certification for professionals with three or more years of experience.
This credential demonstrates expertise in identifying and managing enterprise IT risk and implementing and maintaining information systems controls. CRISC can enhance your IT team’s credibility with stakeholders and clients.
The artificial intelligence revolution is rewriting the rules of cybersecurity, and the financial stakes are massive. AI-powered cybersecurity will skyrocket from $15 billion in 2021 to a staggering $135 billion by the end of the decade – Artificial Intelligence in Cybersecurity Market Analysis
In this course, you’ll cover all four domains of the Certified in Risk and Information Systems Control (CRISC) exam and gain the knowledge and concepts required to obtain CRISC certification. Since its inception in 2010, the CRISC certification is for IT and business professionals who identify and manage risks through the development, implementation, and maintenance of appropriate information systems (IS) controls.
Here are five insightful blog posts about ISACA and its cybersecurity certifications. Each one focuses on a different aspect of how ISACA’s training can enhance your cybersecurity career, take a read:Â
- Top ISACA Cybersecurity Certifications 2024
- Incorporating ISACA Certifications into Corporate Training ProgramÂ
- ISACA’s CISM vs CRISC: Which Certification Is Right for You?Â
- Your Ultimate Guide to the ISACA CISM CertificationÂ
- Become a leader with ISACA: Cybersecurity LeadershipÂ
Explore more about cybersecurity certifications with our cybersecurity training and certifications guide.
Skills Covered
Students will master the four CRISC domains:
- Governance
- IT Risk Assessment
- Risk Response and Reporting
- Information Technology and Security
Prerequisites
IT risk management professionals with at least 3 years of relevant professional work experience in IT risk and information systems control.
Target Audience
The CRISC certification is designed for:
- IT Managers
- IT Risk Analysts
- IT Consultants
- IT Risk/Security Advisory Managers
- IT Compliance Managers
- IT Risk Assessment Specialists
Module 1: Governance
- Risk Assessment Concepts, Standards and Frameworks
- Organizational Strategy, Goals and Objectives
- Organizational Structure, Roles and Responsibilities
- Organizational Culture and Assets
- Policies, Standards and Business Processes
- Enterprise Risk Management, Risk Management Frameworks and Three Lines of Defense
- Risk Profile, Risk Appetite and Risk Tolerance
- Navigating Professional Ethics of Risk Management and Requirements in Laws, Regulations and Controls
Module 2: IT Risk Assessment
- Risk Events, Threat Modeling and Threat Landscape
- Vulnerability and Control Deficiency Analysis
- Risk Scenario Development
- Risk Register
- Risk Analysis Methodologies
- Business Impact Analysis
- Inherent, Residual and Current Risk
Module 3: Risk Response and Reporting
- Risk Treatment/Risk Response Options
- Risk and Control Ownership
- Managing Risk from Processes, Third Parties and Emerging Sources
- Control Types, Standards and Frameworks
- Control Design, Selection and Analysis
- Control Implementation, Testing and Effectiveness
- Risk Treatment Plans
- Data Collection, Aggregation, Analysis and Validation
- Risk and Control Monitoring and Reporting Techniques
- Performance, Risk and Control Metrics
Module 4: Information Technology and Security
- Enterprise Architecture
- IT Operations Management
- Project Management
- Disaster Recovery Management
- Data Life Cycle Management
- System Development Life Cycle
- Emerging Technologies
- Information Security Concepts, Frameworks, Standards and Awareness Training
- Business Continuity Management
- Data Privacy and Protection Principles
Dates & Locations
July 20, 2026 - July 23, 2026
July 20, 2026 - July 23, 2026
September 1, 2026 - September 4, 2026
September 1, 2026 - September 4, 2026
November 10, 2026 - November 13, 2026
November 10, 2026 - November 13, 2026
Exam & Certification
CRISC: Certified in Risk and Information Systems Control
Get CRISC certified and join an elite group of IT professionals recognized and sought after for their expertise. This is a designation that will get you instant credibility with peers, stakeholders and regulators.
Training & Certification Guide
Frequently Asked Questions
Speak to a Training Consultant
All courses are HRD Claimable.
Get in touch with our team via the form or WhatsApp us on +6011-5119 6631
