EnterpriseServicesMentorship ProgramTraining Calendar
ITIL® AcademyContactAbout Us

Domains

HomeCyber SecurityCRISC® Certification Training

CRISC® Certification TrainingCyber Security Certification Training

Learn to identify, assess, respond to and report IT risk in business terms, using ISACA's CRISC exam content outline as the backbone.

This Course Includes:

Live online instruction

Risk scenario workshops

Control and reporting practice

Practice questions and review

5.0500 reviews
3,000Enrolled
EnglishLanguage
Industry CertificationLifetime Access24/7 Support

What you will learn

Explain how IT risk fits within enterprise risk management, including appetite, tolerance and lines of defence
Write risk scenarios and assess likelihood and impact with a defined method
Select risk responses, assign ownership and track action plans
Design, monitor and test controls and interpret control deficiencies
Build KRIs, KCIs and dashboards that an executive can act on
Relate technology principles, operations, development, resilience and security to risk decisions

About this course

CRISC® is ISACA's credential for professionals who identify and manage IT and enterprise risk and implement information systems controls. It is deliberately about decisions: what could go wrong, how bad it would be, what to do about it, and how to tell leadership.

The current outline has four domains: Governance, Risk Assessment, Risk Response and Reporting, and Technology and Security. This course follows them in order and spends the most time where the exam does.

CertScope delivers the training. ISACA decides eligibility, runs the exam and awards the credential.

Exam at a glance

  • Exam: 150 questions across four domains
  • Exam registration fee (reference only): US$575 ISACA member / US$760 non-member
  • Application processing fee: US$50 after passing, per ISACA's CRISC page
  • Outline: Four-domain outline effective 2025; confirm the version in force on your exam date

ISACA facts. Registration and application charges are ISACA's, not CertScope tuition. Always confirm current details with ISACA before you book.

Learning Path

  1. 1

    Check ISACA's current requirements

    Confirm experience rules, the exam outline version and registration process.

  2. 2

    Learn the four domains

    Study governance, assessment, response and technology through scenarios.

  3. 3

    Practise risk reasoning

    Work through ranked-answer questions and review rationales.

  4. 4

    Register and sit the exam with ISACA

    Book through ISACA and confirm fees and windows.

  5. 5

    Apply for certification

    Submit experience and plan maintenance.

The CertScope Advantage

🎯

Scenario-first

Risk is learned by working scenarios, not memorising frameworks.

✅

Business-readable outputs

Exercises end in something a non-technical leader could read.

🧭

Clear boundaries

ISACA's rules and fees are separated from CertScope's offer.

Is CRISC® right for you?

This course is for you if…

  • IT risk analysts and managers
  • Control owners and technology auditors
  • Security and compliance professionals moving into risk
  • Enterprise risk teams with technology exposure

You may want to reconsider if…

  • Beginners with no risk, audit, security or IT governance exposure
  • Anyone looking for hands-on penetration testing or tool training

Course curriculum

Governance

Where IT risk sits within organisational strategy, structure, culture and enterprise risk management. Exam domain weight: 26%.

6 lessons

  • Strategy, goals, culture and ethics
  • Organisational structure, roles and responsibilities
  • Policies and standards
  • Business processes, resilience and asset management
  • ERM, lines of defence, risk profile, appetite and tolerance
  • Risk frameworks and legal, regulatory and contractual requirements

Risk Assessment

Turning threats, vulnerabilities and control gaps into rated risk scenarios. Exam domain weight: 22%.

5 lessons

  • Risk scenarios, threats and vulnerabilities
  • Control deficiencies
  • Likelihood, impact and analysis
  • Assessment methodologies
  • Risk and control identification and evaluation

Risk Response and Reporting

Choosing and tracking responses, monitoring controls and communicating risk upward. Exam domain weight: 32%.

7 lessons

  • Risk response and treatment options
  • Ownership and action plans
  • Control design, implementation and monitoring
  • Risk aggregation, analysis and validation
  • KRIs, KCIs and KPIs
  • Dashboards, heat maps and scorecards
  • Emerging-risk monitoring and communication

Technology and Security

The technology knowledge a risk professional needs to judge exposure and controls credibly. Exam domain weight: 20%.

7 lessons

  • Technology principles, roadmaps and enterprise architecture
  • IT operations: change, asset, problem and incident management
  • Systems development life cycle and DevOps
  • Data lifecycle, privacy and data protection
  • Portfolio and project management including Agile
  • Resilience, disaster response and recovery
  • Emerging technologies and security concepts

Exam Strategy and Scenario Practice

Technique for ranked-answer questions and a structured weak-area review.

4 lessons

  • Choosing the best response, not a plausible one
  • Timed scenario sets
  • Targeted domain review
  • ISACA registration and application steps

Schedules

Upcoming Batches — Register Your Interest

Weekday Batches

Morning & evening slots to fit around work

Weekend Batches

Intensive Saturday & Sunday programmes

New batches are opening shortly. Leave your details below and our team will reach out with schedule options and registration guidance as soon as they are confirmed.

or

We respect your privacy. Your details are only used to share schedule information.

Request more information

Talk to our course advisors and get personalized guidance on curriculum, pricing, and batch schedules.

  • Personalized course guidance
  • Flexible payment options
  • Group & corporate discounts
  • Download course brochure

✓ Certified trainers  · ✓ Accredited partnerships  · ✓ 87–95% pass rates

Prerequisites

  • Relevant professional experience is required for certification by ISACA (training does not replace it)

Frequently asked questions