CRISC Preparation Path
Practice enterprise IT risk and controls through original CertNivo scenarios across governance, risk assessment, response and reporting, and technology and security.
Governance
Organizational governance, risk governance, strategy, roles, appetite, tolerance, policies, resilience and enterprise risk management.
Risk Assessment
Risk identification, threat and vulnerability context, scenarios, analysis, BIA, risk registers, inherent and residual risk.
Risk Response & Reporting
Treatment options, ownership, controls, third parties, exceptions, action plans, KRIs, KCIs, KPIs and reporting.
Technology & Security
Architecture, operations, SDLC, data lifecycle, resilience, emerging technology, security principles, privacy and awareness.
Flexible CRISC study modes
Use Practice Exams to see the session sizes currently supported by the loaded CRISC bank, then review results in your dashboard.