Certified in Risk and Information Systems Control (CRISC)

To qualify for certification, an individual must pass a three-hour exam and have five years of experience in IT risk management or any of the key domains listed below:

• Risk identification, assessment and evaluation
• Risk response
• Risk monitoring
• Information systems control design and implementation
• IS control monitoring and maintenance

The individual must have skills and practical experience in information system control and risk management and a grasp of IS control and risk frameworks. The job of a CRISC-certified individual is to design and implement information system control and management strategy to protect an organization from IT risks.

Risk professionals, control professionals, business analysts and project managers are some of the job roles associated with CRISC qualification.