Study Certified in Risk and Information Systems Control
CRISCEverything you need to prepare: flashcards to build vocabulary, learning tests to study topic by topic, timed exams that simulate the real thing, and a browsable question bank with explanations and references. About this certification →
Unlock all of Certified in Risk and Information Systems Control
One certification plan opens every flashcard set, test, timed exam, and question bank here.
Flashcards
Term & definition · self-checkNew to this certification? Take a flashcards tour first to estimate your knowledge level and see where to focus before the practice learning tests.
Practice learning tests
Shorter, untimed quizzes to study and reinforce individual topics, with an explanation after every question.
Practice Test 1 — GovernanceFree demo
Domain 1: risk appetite, tolerance and capacity, three lines of defense, risk ownership, frameworks, culture, and professional ethics.
Practice Test 2 — IT Risk Assessment🔒 Premium
Domain 2: risk scenarios, inherent vs residual risk, ALE calculation, qualitative vs quantitative analysis, aggregation, BIA, and heat maps.
Practice Test 3 — Risk Response and Control Design🔒 Premium
Domain 3 (part 1): treatment options, cost-benefit of controls, acceptance validity, control design vs operating effectiveness, and third-party risk.
Practice Test 4 — Risk Monitoring and Reporting🔒 Premium
Domain 3 (part 2): KRIs, KPIs and KCIs, threshold calibration, data validation, audience-tailored reporting, escalation, and register maintenance.
Practice Test 5 — Information Technology and Security🔒 Premium
Domain 4: emerging technology, cloud shared responsibility, access and encryption risk, patching, data lifecycle, privacy, and resilience.
Study by exam domain
2024.1 · 150 questionsThe 4 domains of Certified in Risk and Information Systems Control. This vendor does not publish a weighting, so the split below is even — treat it as a checklist rather than a forecast.
No published weighting for this exam — domains shown evenly. Or browse the whole question bank →
Practice exams
Timed · exam simulationFull-length, timed exams that mimic the real certification — the correct number of questions and time limit, with sourced references for every answer.
Practice Exam A — Timed Simulation🔒 Premium
Full-length timed simulation modeled on the real CRISC exam (240 minutes). 150 exam-style questions across all four domains, with references.
Practice Exam B — Timed Simulation🔒 Premium
Full-length timed simulation modeled on the real CRISC exam (240 minutes). 150 exam-style questions across all four domains, with references.
Mock exams
Randomized · you choose the level6 timed exams built on demand, with questions drawn at random from every practice exam and question bank in Certified in Risk and Information Systems Control at the difficulty mix you pick. Every run counts towards your readiness score and shows which domains to work on next.
Exam question bank
Browse · by topicStudy real exam-style questions grouped by official exam topics — reveal the correct answer, explanation, and sourced references for each one.