Complete, exam-focused prep for ISACA's Certified in Risk and Information Systems Control (CRISC), the leading IT-risk credential. Aligned to the November 2025 blueprint across all four domains: governance (enterprise and risk governance, the three lines of defense, risk appetite/tolerance/capacity, risk and control ownership, frameworks like COSO ERM/ISO 31000/NIST RMF, and risk culture); IT risk assessment (risk scenarios, qualitative and quantitative analysis with likelihood/impact and SLE/ALE, inherent vs residual risk, control and vulnerability assessment, and KRIs); risk response and reporting — the largest domain — covering the four response options, control design and types, implementation and testing, monitoring with KRIs/KCIs, stakeholder reporting, and third-party risk; and information technology and security (enterprise architecture, resilience with BIA/RTO/RPO, data and access security, and security testing and incident response). Includes exam-trap callouts, per-domain mastery checks, a 50-question mock, a full-length 125-question exam simulator, and a spaced-repetition flashcard deck. CRISC is 150 questions in 4 hours; passing is a scaled 450 out of 800.
0.00 USD
Create a free account to preview lessons. Browse all courses.