• Number of Questions: 150 multiple-choice questions

• Scoring: Scaled score ranging from 200 to 800, with a passing score of 450 

The CRISC exam covers four domains, each contributing to the overall score:

1. Governance – 26%

2. IT Risk Assessment – 20%

3. Risk Response and Reporting – 32%

4. Information Technology and Security – 22%

Exam Retake Policy

Candidates who do not pass the exam on their first attempt are allowed up to three retakes within a 12-month period. 

The waiting periods between attempts are as follows:

• Second Attempt: 30 days after the first attempt

• Third Attempt: 90 days after the second attempt

• Fourth Attempt: 90 days after the third attempt

Exam Delivery Options

Candidates can choose between two delivery methods:

• In-Person Testing: Available at authorized PSI testing centers worldwide

• Remote Proctoring: Allows candidates to take the exam from a location of their choice, provided they meet the technical and environmental requirements

Taking the training and passing the CRISC certification exam is just the first step in becoming certified.

To become CRISC certified, an individual must:

• Pass the certification exam

• Pay the US$50 application processing fee

• Submit an application to demonstrate experience requirements

• Adhere to the Code of Professional Ethics

• Adhere to the Continuing Professional Education Policy

Candidates have five years from passing the exam to apply for CRISC certification.