ISACA CRISC Exam: Tips and Exam Details
ISACA's Certified in Risk and Information Systems Control (CRISC) is a certification for IT professionals who are involved in risk management and information systems control. The CRISC exam is designed to test candidates' knowledge of risk management, governance, and control. This exam is rigorous, so candidates must prepare well to pass it.
Exam Objectives:
The CRISC exam is designed to test a candidate's knowledge of the following areas:
- IT Risk Identification
- IT Risk Assessment
- Risk Response and Mitigation
- Risk and Control Monitoring and Reporting
Exam Details:
The CRISC exam is a computer-based test that is administered by ISACA. The exam consists of 150 multiple-choice questions that must be answered within a four-hour time limit. The exam is available in English, Chinese Simplified, French, German, Italian, Japanese, Korean, Portuguese, and Spanish languages. The exam costs $760 for ISACA members and $985 for non-members. Candidates must score at least 450 out of 800 to pass the exam.
The CRISC exam can be taken at an ISACA-approved testing center or online via remote proctoring. Candidates must schedule their exam date and location at least 48 hours in advance. The testing center will provide the necessary equipment for the exam.
Related Books:
ISACA recommends the following books to help candidates prepare for the CRISC exam:
- "CRISC Review Manual, 6th Edition" by ISACA
- "CRISC Certified in Risk and Information Systems Control All-in-One Exam Guide" by Bobby E. Rogers and Dawn Dunkerley
- "CRISC Certified in Risk and Information Systems Control Practice Exams" by Bobby E. Rogers
- "IT Risk: Turning Business Threats into Competitive Advantage" by George Westerman and Richard Hunter
- "Risk Management in IT Outsourcing" by Ipek Ozkaya and Sushil Sharma
Candidates should also review ISACA's official CRISC Exam Candidate Guide for additional information and guidance.
To increase their chances of passing the CRISC exam, candidates should study regularly and use a variety of resources. They should also take practice exams to identify areas where they need to improve. Candidates should ensure they have a solid understanding of the exam objectives and how they relate to risk management and information systems control.