ISACA CRISC Voucher

CRISC is ISACA’s certification for IT risk management and information systems control. It focuses on identifying, assessing, responding to, and reporting on technology risk.

No prerequisites to sit the exam. To earn the certification, ISACA requires at least 3 years of relevant professional experience, and you must apply within the allowed window after passing.

The exam covers 4 domains:
- Governance
- Risk Assessment
- Risk Response and Reporting
- Technology and Security

150 multiple-choice questions, 4 hours (240 minutes).

Scaled score range 200–800, and 450 is the passing score.

CRISC is risk-first. It’s not an audit credential like CISA, and it’s not a security management program credential like CISM. It’s for people who live in risk: assessment, controls, response planning, reporting, and stakeholder decisions.

Common roles include IT Risk Analyst/Manager, GRC Analyst/Manager, Technology Risk, Risk & Controls, and Third-Party Risk.

It’s difficult if you’ve never worked in risk. The exam expects you to think in risk terms: likelihood/impact, controls, response options, governance, and reporting priorities.

CRISC stays active with maintenance: 20 CPE per year and 120 CPE per 3-year cycle (plus ISACA’s maintenance requirements).

Typically, vouchers will arrive by email within fourteen (14) days.

Each voucher purchase is its own transaction, but you may buy multiple vouchers. Each voucher code will be send to you separately via email.

Voucher validity varies depending on ISACA's policies. Typically, vouchers are valid for 12 months from the date of purchase. We recommend checking CompTIA’s and ISACA's websites for the most up-to-date details.

Standard vouchers do not include retake options.

Yes, all ISACA vouchers can be used to register for either an in-person or online exam.