How to get CRISC certified

You’ve prepared by doing the work, taken the exam and are now ready to apply for your CRISC® Certification. Let’s make sure you have everything you need:

Members save on CPEs, renewals, and exams

JOIN

CRISC certification requirements

CRISC Logo

Successfully complete the CRISC examination

The CRISC exam is open to anyone who has an interest in information security. You can still take the CRISC exam even if you haven’t met the experience requirements yet, although you’ll have to meet those before getting certified. When you take the CRISC exam, we’ll send you your results, and if you passed, the details you need to apply for your CRISC certification. Candidates have five years from the passing date to apply for certification.

Demonstrate the minimum required work experience

A minimum of 3-years of professional information systems auditing, control or security work experience–as described in the CRISC job practice areas–is required for certification. Work experience for the CRISC certification must be gained within the 10-year period preceding the application date for certification. Candidates have 5-years from the passing date to apply.

Earn & report CPE hours

Attain and report a minimum of 120 Continuing Professional Development (CPE) hours during a three-year reporting period, completing a minimum of 20 CPE hours per year. If these CPEs satisfy the requirements for other ISACA certifications, they may also count toward those designations.

Adhere to the Code of Professional Ethics

As a member of ISACA and/or holder of the CGEIT designation, you agree to a Code of Professional Ethics to guide your professional and personal conduct.

Already certified and need to maintain your certification?