Search...

Quick Feedback

CRISC Study Guide

Domain-by-domain study guide for CRISC - Certified in Risk and Information Systems Control (CRISC). Covers all 4 exam objectives with topic checklists, quick notes, and practice links.

Download PDF Notes

Exam Overview

Key facts before you start studying

Duration

240 min

Questions

150

Exam Code

CRISC

Domains

Quick Navigation

Jump to a specific exam domain

1. Corporate IT Governance (26%)
2. IT Risk Assessment (27%)
3. Risk Response and Reporting (23%)
4. Information Technology and Security (24%)

Domain 1

26%

Corporate IT Governance

IT governance frameworks, risk appetite, risk culture, regulatory alignment, and governance oversight mechanisms.

Topics to Master

IT risk governance frameworks
Risk appetite and tolerance
Three lines of defense
Risk committee roles
Board oversight
Risk culture development
Policy enforcement
Governance maturity

Domain 2

27%

IT Risk Assessment

Risk identification, analysis, evaluation, scenario development, and threat/vulnerability assessment techniques.

Topics to Master

Threat landscape analysis
Vulnerability assessment
Risk scenario development
Quantitative risk analysis
Business impact analysis
Risk register management
Emerging risk identification
Control assessment

Domain 3

23%

Risk Response and Reporting

Risk treatment options, control design, KRI development, risk reporting, and stakeholder communication.

Topics to Master

Risk response options
Control design and implementation
KRI development
Risk reporting
Risk acceptance documentation
Control monitoring
Risk communication
Stakeholder engagement

Domain 4

24%

Information Technology and Security

IT security architecture, cloud security, identity management, data protection, incident response, and technology risk.

Topics to Master

Security architecture
Cloud security controls
Identity and access management
Data protection
Business continuity
Vulnerability management
Incident response
Secure development

Continue Your Prep

Free CertStud resources for CRISC

Study Notes Exam Study Plan Start Practice Test

Back to CRISC

CRISC Study Guide

Domain-by-domain study guide for CRISC - Certified in Risk and Information Systems Control (CRISC). Covers all 4 exam objectives with topic checklists, quick notes, and practice links.

Download PDF Notes

Exam Overview

Key facts before you start studying

Duration

240 min

Questions

150

Exam Code

CRISC

Domains

Quick Navigation

Jump to a specific exam domain

1. Corporate IT Governance (26%)
2. IT Risk Assessment (27%)
3. Risk Response and Reporting (23%)
4. Information Technology and Security (24%)

Domain 1

26%

Corporate IT Governance

IT governance frameworks, risk appetite, risk culture, regulatory alignment, and governance oversight mechanisms.

Topics to Master

IT risk governance frameworks
Risk appetite and tolerance
Three lines of defense
Risk committee roles
Board oversight
Risk culture development
Policy enforcement
Governance maturity

Domain 2

27%

IT Risk Assessment

Risk identification, analysis, evaluation, scenario development, and threat/vulnerability assessment techniques.

Topics to Master

Threat landscape analysis
Vulnerability assessment
Risk scenario development
Quantitative risk analysis
Business impact analysis
Risk register management
Emerging risk identification
Control assessment

Domain 3

23%

Risk Response and Reporting

Risk treatment options, control design, KRI development, risk reporting, and stakeholder communication.

Topics to Master

Risk response options
Control design and implementation
KRI development
Risk reporting
Risk acceptance documentation
Control monitoring
Risk communication
Stakeholder engagement

Domain 4

24%

Information Technology and Security

IT security architecture, cloud security, identity management, data protection, incident response, and technology risk.

Topics to Master

Security architecture
Cloud security controls
Identity and access management
Data protection
Business continuity
Vulnerability management
Incident response
Secure development

Continue Your Prep

Free CertStud resources for CRISC

Study Notes Exam Study Plan Start Practice Test