Certified in Risk and Information Systems Control
CRISC validates expertise in identifying, evaluating, and managing IT risk and designing, implementing, and maintaining IS controls. It uniquely bridges IT risk management with enterprise risk governance.
Exam Format
Computer-Based Testing (CBT)
Prerequisites
3 years professional experience with hands-on involvement in at least 2 CRISC domains
Exam Cost
$625 (ISACA member) — $810 (non-member)
CPE Requirement
120 CPE hours over 3-year cycle (minimum 20/year)
Available In
Global, North America, Europe, +1
Industry Pass Rate
Approximately 60–70% (ISACA does not publish official rates)
Exam Overview
Total Questions
150
Computer-Based Testing (CBT)
Exam Duration
4h
~1.6 min per question
Passing Score
450 / 800 (scaled; range 200–800)
Scaled score system
Exam Domains
4
Knowledge areas tested
Exam Domains
Understand the weight and coverage of each exam domain to prioritize your study time effectively.
Key Topics
Study Plan
A proven three-phase approach to mastering the CRISC exam. Our AI personalizes this plan to your schedule and strengths.
Weeks 1-4
Weeks 5-8
Weeks 9-12
AI Study Tools
Every CRISC student gets access to our full AI toolkit, designed to maximize retention and minimize wasted study time.
AI extracts and ranks the most exam-relevant CRISC concepts by domain weight, with cross-references to related topics.
Visual concept maps for each CRISC domain showing how frameworks, standards, and processes interconnect.
After every practice session, AI identifies your specific CRISC knowledge gaps and adjusts your study plan.
Unlimited AI-generated practice questions calibrated to real CRISC exam difficulty, targeting your weak areas.
Practice
Test your knowledge with questions that mirror the real exam in difficulty and format. Select an answer to see the detailed explanation.
An internal audit activity has recently completed a major engagement. The chief audit executive (CAE) is reviewing the final communication. Which of the following would be MOST appropriate to include when the engagement results contain significant risk exposures?
These are just 3 of the 50,000+ practice questions available in NexusGRC Academy. Start your free trial to access the full question bank.
Industry Data
Understanding the exam difficulty helps you plan the right amount of preparation time.
Industry Pass Rate
Approximately 60–70% (ISACA does not publish official rates)
NexusGRC Academy provides AI-powered study tools, adaptive practice exams, and personalized study plans to help you beat the odds on the CRISC exam.
From the Blog
Free Resources
Side-by-side comparison of CIA, CISA, CISM, CRISC, CFE, and ISO certifications. Covers prerequisites, costs, career paths, and salary benchmarks.
Everything you need to prepare for exam day: required documents, time management strategies, mental preparation tips, and last-minute review points.
A customizable study plan template that breaks down your certification preparation into weekly milestones with built-in review cycles and mock exam scheduling.
FAQ
Common questions about the CRISC exam and NexusGRC Academy preparation.
Join thousands of professionals who passed the CRISC exam with NexusGRC Academy. 7-day free trial, no credit card required.