Description
Please be advised that the CRISC Exam Content Outline will be updated effective 3 November 2025. Starting on that date the CRISC Exam will reflect the new Exam Content Outline. Updated preparation material for the new Exam Content Outline will be available for purchase in September 2025. Purchase of current material will not grant you access to the newer material at a later date. More details here.
The CRISC Online Review Course is an online preparation course that prepares learners to pass the CRISC certification exam using proven instructional design techniques and interactive activities. The course covers all four of the CRISC domains, and each section corresponds directly to the CRISC job practice.
The course incorporates video, interactive eLearning modules, downloadable job aids, case study activities, and practice exam. Learners will be able to navigate the course at their own pace, following a recommended structure, or target preferred job practice areas. Learners may also start and stop the course based on their study schedule, picking up exactly where they left off the next time, they access the course.
Learning Objectives:
The online course, hosted on ISACA’s learning platform PERFORM, is organized to assist candidates in understanding essential concepts and studying the following job practice areas:
- Governance
- IT Risk Assessment
- Risk Response and Reporting
- Information Technology and Security
Included Materials:
- Video
- Interactive Content
- Downloadable workbooks and job aids
- Case study activities
- Practice exam
Ideal For:
- Professionals preparing to become CRISC certified.
- Risk practitioners
- Students or recent graduates
Learners will have access to the course for one year from date of purchase and will earn 15 CPE upon completion. This course has a seat time of approximately 12 hours and is accessed via the Learning Access tab of your MyISACA dashboard.
Cancellation/Refund Policy
All purchases of online learning courses are final. Access to the online learning courses and materials is immediate upon purchasing; therefore, no refunds or exchanges will be provided. Prices subject to change without notice.
Enterprise Training
Online review courses are also available for purchase through our enterprise sales team for larger organizations. Visit the Enterprise Training page and reach out to an associate for more information.
Course Outline
- Governance (26%)
- IT Risk Assessment (20%)
- Risk Response and Reporting (32%)
- Information Technology and Security (22%)
New in 2021
Risk Governance
- Risk Monitoring and Reporting
- Enterprise Risk Management and Risk Management Frameworks
- Risk Treatment Plans
- Three Lines of Defense
Control Design and Implementation
- Control Identification and Selection
- Control Testing and Effectiveness Evaluation
Risk Monitoring and Reporting
- Risk Treatment Plans
- Key Control Indicators (KCIs)
Information Technology Principles
- System Development Life Cycle (SDLC)
Information Security Principles
- Data Privacy and Data Protection Principles
