The CRISC - Certified Risk and Information System Control - certificate gives you international recognition (from ISACA) as a security professional. The CRISC extensive set of online practice questions (QAE) are included in the courseprice.Continuing Professional Education (CPE) : 31Practice questions (QAE = Questions, Answers and Explanations) : 6 month accessUpdated 4/2026 DOMAIN 1—Governance 26% Organizational Governance AOrganizational Strategy, Goals, and ObjectivesOrganizational Structure, Roles, and ResponsibilitiesOrganizational CulturePolicies and StandardsBusiness ProcessesOrganizational AssetsRisk Governance BEnterprise Risk Management and Risk Management FrameworkThree Lines of DefenseRisk ProfileRisk Appetite and Risk ToleranceLegal, Regulatory, and Contractual RequirementsProfessional Ethics of Risk ManagementDOMAIN 2—IT Risk Assessment 20% IT Risk Identification ARisk Events (e.g., contributing conditions, loss result)Threat Modelling and Threat LandscapeVulnerability and Control Deficiency Analysis (e.g., root cause analysis)Risk Scenario DevelopmentIT Risk Analysis and Evaluation BRisk Assessment Concepts, Standards, and
