ISACA Live online

Certified in Risk and Information Systems Control (CRISC) Training

Q: How long is the Certified in Risk and Information Systems Control (CRISC) course, and when does it start?

The course runs for 32 hours of live, instructor-led online training across 15 sessions. Weekend and weekday batches are available, and the next batch starts on Monday, October 26, 2026.

Q: What if I don't pass the Certified in Risk and Information Systems Control (CRISC) exam?

Your enrollment is covered by CertOcean's pass or full refund guarantee. If you don't clear the exam, you can claim a full refund under the guarantee terms.

CertOcean's Certified in Risk and Information Systems Control (CRISC) training is a live, instructor-led online course that prepares you for the Certified in Risk and Information Systems Control (CRISC) certification exam. You learn in 15 live sessions (32 hours in total) with an expert instructor, work through 4 curriculum modules with hands-on assignments and keep lifetime access to the class recordings.

4.9Rated Excellent on Trustpilot

32 hoursLive training
15 sessionsWith an instructor
4 modules57 topics
Mon, Oct 26Next batch

CRISC ISACAExam-focused live training

$1,399 ~~$1,599~~ One-time · USD

You save$20013% off

Enroll now

Not sure yet? Talk to a course advisor

Pass or full refund, in writing
Secure checkout

Course overview

About the Certified in Risk and Information Systems Control (CRISC) training

Who is CRISC training for? It is for IT and business professionals who manage risk through effective information systems controls. The course covers governance, IT risk assessment, risk response and reporting, and technology and security. You learn to align IT risk with business goals, build mitigation strategies and communicate risk clearly, so you can advance your career and strengthen IT governance in your organization.

This course includes

Instructor-led live classes40 hours of live online classes: 10 sessions of 4 hours each.
Practical exercisesEvery class is followed by practical exercises based on real risk scenarios.
Lifetime accessKeep lifetime access to all course material, including presentations, quizzes and class recordings.
24/7 expert supportOur support team is available 24x7 to answer questions.
CertificationComplete the course and project to receive CertOcean's CRISC training certificate. The CRISC certification is earned by passing ISACA's exam and meeting its experience requirements.
AssessmentsRegular assessments and quizzes check your learning as you go.

What you'll learn in this course

Understand the core principles of IT risk management and CRISC certification domains
Identify, assess, and prioritize IT risks aligned with business objectives
Design and implement effective risk response and mitigation strategies
Integrate risk management into enterprise governance frameworks
Monitor, report, and communicate risk and control effectiveness to stakeholders
Evaluate and manage information systems controls across business processes
Align IT risk management with regulatory, compliance, and audit requirements
Prepare confidently for the ISACA CRISC certification exam with real-world scenarios

What is CRISC certification training?

CRISC certification training is a course that teaches you to identify, evaluate and manage enterprise IT risk, and prepares you for ISACA's CRISC exam. It covers all four CRISC domains, with the weighting used since the exam update on November 3, 2025: Governance (26%), IT Risk Assessment (22%), Risk Response and Reporting (32%), and Information Technology and Security (20%).

Guided by expert instructors, you learn practical strategies aligned with business objectives and gain the confidence to communicate and manage IT risk across the organization. The course includes focused exam preparation and suits IT professionals, risk managers and compliance leaders.

Benefits of CRISC certification:

Global recognition as a skilled IT risk and control professional
A stronger ability to design and implement risk-based strategies
Career growth in risk management, compliance and IT governance roles

Curriculum

Certified in Risk and Information Systems Control (CRISC) course syllabus

4 modules · 57 topics · 32 hours of live training

Domain 1: Governance (26%) 14 topics

A. Organizational governance
Organizational strategy, goals and objectives
Organizational structure, roles and responsibilities
Organizational culture
Policies and standards
Business processes
Organizational assets
B. Risk governance
Enterprise risk management and risk management frameworks
The three lines model
Risk profile
Risk appetite and risk tolerance
Legal, regulatory and contractual requirements
Professional ethics of risk management

Domain 2: IT Risk Assessment (22%) 11 topics

A. IT risk identification
Risk events, such as contributing conditions and loss results
Threat modeling and the threat landscape
Vulnerability and control deficiency analysis, such as root cause analysis
Risk scenario development
B. IT risk analysis and evaluation
Risk assessment concepts, standards and frameworks
The risk register
Risk analysis methods
Business impact analysis
Inherent and residual risk

Domain 3: Risk Response and Reporting (32%) 19 topics

A. Risk response
Risk treatment and response options
Risk and control ownership
Third-party risk management
Issue, finding and exception management
Managing emerging risk
B. Control design and implementation
Control types, standards and frameworks
Control design, selection and analysis
Control implementation
Control testing and effectiveness evaluation
C. Risk monitoring and reporting
Risk treatment plans
Data collection, aggregation, analysis and validation
Risk and control monitoring techniques
Risk and control reporting techniques, such as heat maps, scorecards and dashboards
Key performance indicators (KPIs)
Key risk indicators (KRIs)
Key control indicators (KCIs)

Domain 4: Information Technology and Security (20%) 13 topics

A. Information technology principles
Enterprise architecture
IT operations management, such as change, asset, problem and incident management
Project management
Disaster recovery management
Data life cycle management
System development life cycle (SDLC)
Emerging technologies
B. Information security principles
Information security concepts, frameworks and standards
Security awareness training
Business continuity management
Data privacy and data protection principles

Get the detailed syllabus

Receive the full module plan, batch timings and a call with an advisor who can answer your exam questions.

Request syllabus Ask on WhatsApp

Upcoming batches

Next Certified in Risk and Information Systems Control (CRISC) batches

Live online classes with an instructor, 9:00 AM to 5:00 PM Eastern Time (ET).

Weekday batch

Starts Monday, October 26

Starts tomorrow · Live online

Enroll

Weekend batch

Starts Saturday, October 31

Starts in 6 days · Live online

Enroll

Flexible

Need another date or time?

Ask for a private or custom schedule.

Ask us

Sample certificate

Certificate IDCO-2026-48217

Certificate of Completion

This is to certify that

Michael Anderson

has successfully completed 32 hours of live, instructor-led training in

Certified in Risk and Information Systems Control (CRISC)

October 25, 2026Date of issue Head of Training

Certification

Earn your Certified in Risk and Information Systems Control (CRISC) certificate

Certificate of completionIssued by CertOcean when you finish the training and assignments.
Official ISACA certificationAwarded by ISACA when you pass the exam. The course is built to get you there.
Show it to employersAdd it to your LinkedIn profile and resume.

Start your certification

Learner reviews

Why learners choose CertOcean

Rated Excellent · 4.9 out of 5 on Trustpilot

The training curriculum was great. CertOcean provided me everything required to obtain my CISM. They're excellent!

Laxmi Haya Vadan KaramcheduUnited States · CISMVerified

Very resourceful company, I passed my PMP exam at first attempt, highly recommended.

IjeomaCanada · PMPVerified

Great training support! Helped me pass several certifications.

Cozumel TyUnited StatesVerified

US, Canada and UK hoursClasses set around your working day
Expert instructorsWorking professionals in your field
Career supportResume and interview help

FAQ

Certified in Risk and Information Systems Control (CRISC) course FAQs

Can't find your answer? A course advisor can help with the syllabus, batch dates and exam questions.

Chat on WhatsApp Request a callback

How long is the Certified in Risk and Information Systems Control (CRISC) course, and when does it start?

The course runs for 32 hours of live, instructor-led online training across 15 sessions. Weekend and weekday batches are available, and the next batch starts on Monday, October 26, 2026.

Who should take CRISC training?

CRISC suits professionals who manage or oversee IT risk and controls, such as:

CEOs and CFOs
Chief audit executives, audit partners and heads of audit
CIOs and CISOs
Chief compliance, privacy and risk officers
Security managers, directors and consultants
IT directors, managers and consultants
Audit directors, managers and consultants

When will I receive my CRISC exam results?

A preliminary result (pass or not pass) appears on screen as soon as you finish the exam.
Your official score is emailed and available online within 10 business days.
If you pass, you receive details on how to apply for certification.
Results are not given by phone or fax, to protect your privacy.

What are the requirements for CRISC certification?

Pass the CRISC exam, and apply for certification within 5 years of passing.
Have at least 3 years of cumulative work experience in at least two of the four CRISC domains, one of which must be Domain 1 or Domain 2.
Gain that experience within the 10 years before you apply, or within 5 years after passing the exam.
Submit the CRISC certification application and pay the processing fee.

See ISACA's CRISC page for full details.

How much does the CRISC exam cost?

The CRISC exam costs US$575 for ISACA members and US$760 for non-members.

How do you maintain CRISC certification?

To keep CRISC, you must stay current in IT risk and information systems control. ISACA's continuing professional education (CPE) policy requires you to:

Earn and report at least 20 CPE hours every year
Earn and report at least 120 CPE hours over each three-year cycle
Pay the annual CRISC maintenance fee
Comply with the annual CPE audit if selected
Follow ISACA's Code of Professional Ethics

CPE hours can count toward more than one ISACA certification when the activity applies to each. If you don't meet these requirements, ISACA can revoke your CRISC certification.

Will I get a certificate after the Certified in Risk and Information Systems Control (CRISC) training?

Yes. You receive a CertOcean certificate of completion when you finish the training. The official ISACA certification is awarded by ISACA when you pass the exam, and this course prepares you for it.

What if I don't pass the Certified in Risk and Information Systems Control (CRISC) exam?

Your enrollment is covered by CertOcean's pass or full refund guarantee. If you don't clear the exam, you can claim a full refund under the guarantee terms.

Free course consultation

Talk to a Certified in Risk and Information Systems Control (CRISC) advisor

Share your details and we will send the syllabus, the next batch dates and the best plan for your exam date.

1Tell us your goal and exam date
2Get the syllabus and batch options
3Enroll when you are ready

+1 805 200 4058 WhatsApp us support@certocean.com

Get the syllabus and batch dates

Takes under a minute. No payment needed.

Full name

Mobile number

Country

Course