CRISC: Certified in Risk and Information Systems Control

ISACA’s CRISC validates experience in building a well-defined, agile risk management program, focusing on the business impact of IT risk. It covers four domains: governance, IT risk assessment, risk response and reporting, and information technology and security. It is the only certification that prepares IT professionals for the unique challenges of IT and enterprise risk management as a distinct discipline, separate from general security operations. Holders are experts in translating technical threats into financial and operational risk terms that boards can understand. It is highly sought after for roles in Governance, Risk, and Compliance (GRC).