CRISC Boot Camp CRISC (Certified in Risk and Information Systems Control) Certification Training Boot Camp

For anyone whose job touches a risk register, yes. CRISC is ISACA’s risk credential and it is one of the few that treats IT risk as a management discipline rather than a control checklist. It is a poor fit if your work is hands-on defensive operations, where CySA+ or a SOC-focused credential does more for you.

They sit at the same level and answer different questions. CISM is for running an information security program: strategy, governance, program development and incident management. CRISC is for owning the risk decisions that program serves — scenarios, assessment, response and reporting. If you are accountable for a risk register or report risk upward, CRISC. If you run the security function, CISM.

With this boot camp you prepare in 3 days of focused, instructor-led training rather than the months self-study usually takes. Certification itself also needs ISACA’s experience requirement met and an application approved, which is a separate step from passing the exam.

To be certified, yes — three years across Domains 2 and 3. To sit the exam, no. You can pass first and claim the experience within five years, and that is the usual order.

150 questions over four hours, across four domains: Governance at 26%, Risk Assessment at 22%, Risk Response and Reporting at 32% and Technology and Security at 20%. A scaled score of 450 out of 800 passes.

Our Exam Pass Guarantee covers your second attempt at no charge, and you can re-sit the boot camp free for up to one year from your enrollment date. The guarantee exists so a single unsuccessful attempt never becomes a financial barrier to getting certified.

Yes. Every enrollment includes a voucher covering the full cost of the CRISC exam, along with official courseware, practice materials, and hands-on labs.

ExamNav’s CRISC boot camp is $3,215 for three days of live, instructor-led training. That price includes official courseware, the exam voucher, hands-on labs, unlimited practice exams, a pre-study learning path, and instructor support after class. It also carries our Exam Pass Guarantee: if you don’t pass on the first attempt, your second exam is on us.

Typical students are IT Risk Analysts; Risk and Compliance Managers; IT Auditors moving from testing controls into owning risk; and Security Managers responsible for a risk register, along with people moving into those roles. If you need CRISC to qualify for a job, meet a contract or compliance requirement, or step up to a more senior role, this course is built for you.

Yes. Every CRISC class on our schedule is taught live online by an instructor, starting at 9:00am Eastern each day for three days. You attend in real time, ask questions, and work through the labs as you go. It is not a recorded course.

The CRISC exam has 150 questions over 240 minutes, and you need a scaled score of 450 out of 800 to pass. After you certify, you maintain it through ISACA’s three-year CPE cycle.

Pick a date in the schedule on this page and select Reserve a Seat. We confirm your seat by email, usually within one business day, and send the invoice separately. Nothing is charged when you register.

Yes. For five or more people, request a group quote through our Enterprise Training page; agencies and contractors can use our Government Training page. We reply with pricing and dates for your group.