CRISC — ISACA Certified in Risk and Information Systems Control

IntermediateActive

Experience: 3 yrs IT risk/IS control across 2+ domains, no waivers. Renewal: 20 CPE/yr and 120 CPE per 3-yr cycle; annual maintenance fee US$85 non-member (US$45 member).

Issuer: ISACA
Industry: Cybersecurity
Domain: Security & Risk Management
Level: Intermediate
Exam fee: $760 — verified 2026-09-24

Prerequisites & eligibility

Experience: 3 yrs in IT risk and controls across 2+ domains. You have 5 yrs after passing to apply.

Renewal & maintenance

Valid for 3 years, 120 CPE credits per cycle, $85/yr maintenance fee. Renew by cpe.

AMF is $45 for members / $85 for non-members, per certification. Report CPEs and pay the fee by 31 Jan each year. 10% of certificants are audited.

Related certifications

AAIR ISACA Advanced in AI Risk
AAISM ISACA Advanced in AI Security Management
CCISO EC Council Certified Information Security Officer
CISM ISACA Certified Information Security Manager
CISSP (ISC)2 Certified Information Systems Security Professional
CISSP Concentrations (ISC)2 Certified Information Systems Security Professional Concentrations

Career paths that include CRISC

IT / Security Audit — Mastery phase
Financial Risk Manager — Mastery phase
GRC / Risk & Compliance — Advanced phase
Security Leadership / CISO — Core phase

Plan CRISC in CertAscent → Official ISACA page →