Certified in Risk and Information Systems Control (CRISC)
For professionals connecting technology risk to business decisions.
What this credential focuses on
Who should consider it?
For working security, risk, audit or governance professionals; match your experience to the specific credential.
Eligibility comes first.
The certification award has professional-experience and application requirements. Passing the exam alone does not satisfy the full credential requirements; review ISACA’s current checklist.
How to register
Create or sign in to MyISACA and open the selected credential’s registration page.
Confirm exam access, any prerequisite designation, local test delivery and the separate certification-award requirements.
Register and pay for the exam, then schedule through ISACA’s PSI route within your eligibility period.
Take the exam and complete the credential application and continuing-education obligations that apply to your certification.
An exam pass and a certification award are separate milestones where experience or other credential requirements apply. Check country restrictions on the individual exam page.
ISACA exam registrationMake it count in your career.
Build a detection-and-response lab and document threat models, alert triage and incident handling.
The career guidance here is editorial. A certification can support your profile, but its value depends on your practical ability, your employer’s technology and the role you are targeting.
Official exam source reviewed 13 September 2026. Confirm current details and availability with the provider before booking.