CRISC® Certification — Requirements & Free Practice
US · License preparation
200 free questions · Answer explanations · No signup required
Choose what to practice
Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements
Loading selected examination banks…
Licenses, application pathways and examination requirements
Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.
CRISC® Certification
Licensing authority: ISACA
Initial by examination
- Experience
- Three or more years of CRISC professional work experience across at least two of four CRISC domains; apply within five years of passing the exam.
CRISC Exam
- Provider
- ISACA
- Format
- Computer-based multiple-choice examination
- Exam questions
- Total questions: 150.
- Time limit
- 4 hours (240 minutes)
Examination outline
Governance (26%)
- Organizational Governance
- Risk Governance
Risk Assessment (22%)
- Risk Identification
- Risk Analysis
Risk Response and Reporting (32%)
- Risk Response
- Control Design and Implementation
- Risk Monitoring and Reporting
Technology and Security (20%)
- Technology Principles
- Information Security Principles
Examination sources
- CRISC Exam Content Outline
Job practice areas tested for and validated by a CRISC certification, domains 1-4 and Supporting Tasks
- ISACA 2025 CRISC exam announcement
opening paragraphs
- CRISC Exam Content Outline
What is covered on the CRISC exam?
- ISACA Certification Exams Candidate Guide
printed page 17, ISACA Certification Program Summary, CRISC column
- ISACA Certification Exams Candidate Guide
printed page 22, Scoring Criteria
- ISACA Certification Exams Candidate Guide
printed page 9, sections 2.1 and 2.2
- ISACA Certification Exams Candidate Guide
printed page 9, section 2.2 step 1