CRISC Certification Training in the USA

Yes. Far fewer people hold CRISC than CISA or CISM, and Skillsoft's IT Skills and Salary Survey ranks it among the highest-paying IT certifications in the US. It stands out in risk, compliance and control roles.

Yes. ISACA offers the CRISC exam online with a remote proctor, or in person at a PSI test center in the United States.

CISA is for auditors who test controls. CRISC is for people who identify and manage IT risk and design the controls. Many US risk and compliance managers hold both.

Yes. The course is taught live online, so you can join from anywhere in the USA with a computer and a stable internet connection. You also keep lifetime access to the class recordings in the LMS.

The course runs for 32 hours of live, instructor-led online training across 15 sessions. Weekend and weekday batches are available, and the next batch starts on Saturday, November 14, 2026.

CRISC suits professionals who manage or oversee IT risk and controls, such as:

• CEOs and CFOs
• Chief audit executives, audit partners and heads of audit
• CIOs and CISOs
• Chief compliance, privacy and risk officers
• Security managers, directors and consultants
• IT directors, managers and consultants
• Audit directors, managers and consultants

• A preliminary result (pass or not pass) appears on screen as soon as you finish the exam.
• Your official score is emailed and available online within 10 business days.
• If you pass, you receive details on how to apply for certification.
• Results are not given by phone or fax, to protect your privacy.

• Pass the CRISC exam, and apply for certification within 5 years of passing.
• Have at least 3 years of cumulative work experience in at least two of the four CRISC domains, one of which must be Domain 1 or Domain 2.
• Gain that experience within the 10 years before you apply, or within 5 years after passing the exam.
• Submit the CRISC certification application and pay the processing fee.

See ISACA's CRISC page for full details.

The CRISC exam costs US$575 for ISACA members and US$760 for non-members.

To keep CRISC, you must stay current in IT risk and information systems control. ISACA's continuing professional education (CPE) policy requires you to:

• Earn and report at least 20 CPE hours every year
• Earn and report at least 120 CPE hours over each three-year cycle
• Pay the annual CRISC maintenance fee
• Comply with the annual CPE audit if selected
• Follow ISACA's Code of Professional Ethics

CPE hours can count toward more than one ISACA certification when the activity applies to each. If you don't meet these requirements, ISACA can revoke your CRISC certification.

Yes. You receive a CertOcean certificate of completion when you finish the training. The official ISACA certification is awarded by ISACA when you pass the exam, and this course prepares you for it.

Your enrollment is covered by CertOcean's pass or full refund guarantee. If you don't clear the exam, you can claim a full refund under the guarantee terms.