Study guide

CRISC study guide

Read a lesson, then practice the ideas you want to remember.

Lessons

  1. Asset Identification, Valuation & Data Class
  2. Data Ownership, Custodianship & Governance R
  3. Data Privacy Governance & Global Mandates
  4. Business Resilience Governance & Strategic A
  5. Remediation of Control Deficiencies & Except
  6. Control Design Principles & Defense-in-Depth
  7. Testing Control Design & Operating Effective
  8. Control Types & Categories — Free Study Guide 2026
  9. Legal, Regulatory & Contractual Compliance
  10. Enterprise Governance of IT & Strategic Alig
  11. Organizational Structures, Roles & RACI Matr
  12. The Three Lines Model & Assurance Coordinati
  13. Cloud Computing & Virtualization Architectur
  14. Enterprise Architecture & IT Governance Alig
  15. Systems Resilience, High Availability & Infr
  16. Technology Roadmaps, IT Portfolio & Project
  17. About the CRISC Exam — Free Study Guide 2026
  18. Exam Day Strategy & Question Analysis — Free Study Guide 2026
  19. Business Continuity & Disaster Recovery Plan
  20. Risk Program Maturity Assessment & Continuou
  21. Emerging Technologies Risk — Free Study Guide 2026
  22. Incident Response Lifecycle & Containment St
  23. Information Security Principles & The CIA Tr
  24. Cryptography, Encryption & Key Management
  25. Identity & Access Management, PAM & RBAC
  26. Secure Software Development Lifecycle & DevS
  27. Risk Identification Techniques — Free Study Guide 2026
  28. Risk Scenario Development & Threat Modeling
  29. Threat Landscape Analysis, Threat Actors & A
  30. Vulnerability Assessment & Exposure Analysis
  31. Qualitative Risk Analysis & Risk Matrices
  32. Quantitative Risk Analysis & FAIR Framework
  33. Risk Evaluation, Ranking & Prioritization Cr
  34. Semi-Quantitative Analysis & Monte Carlo Sim
  35. Ethics, Integrity & ISACA Code of Profession
  36. Risk Culture, Tone at the Top & Accountabili
  37. Risk Policy, Standards, Guidelines & Procedu
  38. Enterprise Risk Management Frameworks — Free Study Guide 2026
  39. IT Risk Strategy Alignment with Business Obj
  40. Risk Appetite, Tolerance & Capacity — Free Study Guide 2026
  41. Continuous Risk Monitoring & Automated Telem
  42. Key Risk Indicators, Thresholds & Triggers
  43. Aligning KRIs with KPIs & Business Performan
  44. Stakeholder Risk Reporting & Governance Comm
  45. Business Impact Analysis Integration — Free Study Guide 2026
  46. Risk Aggregation, Correlation & Interdepende
  47. Risk Register Architecture, Maintenance & Li
  48. Cost-Benefit Analysis & Return on Security I
  49. Managing Residual Risk & Secondary Risk
  50. Developing & Implementing Risk Action Plans
  51. Risk Response Options — Free Study Guide 2026
  52. Cloud Service Provider Governance & Shared R
  53. Vendor Contracts, SLAs & Right-to-Audit Clau
  54. Supply Chain Risk Management & Software Bill
  55. Third-Party Risk Management Lifecycle & Due