HomeCertificationsCISM vs CRISC
Certification Comparison

CISM vs CRISC

Two ISACA certifications: security management and IT risk management.

Advanced

CISM (Certified Information Security Manager)

ISACA · CISM

ISACA's certification for information security managers. Focuses on governance, risk management, program development, and incident management from a leadership perspective.

Full Prep Guide
VS
Advanced

CRISC (Certified in Risk and Information Systems Control)

ISACA · CRISC

ISACA's risk management certification. Master IT risk identification, assessment, response, and monitoring for enterprise risk management professionals.

Full Prep Guide

Side-by-Side Comparison

CISM
CRISC
ISACA
Cert Body
ISACA
Advanced
Difficulty
Advanced
150
Questions
150
240 min
Duration
240 min
450/800
Passing
450/800
$760
Exam Cost
$760
4
Domains
4
6
Lessons
8
30
Practice Qs
40
40h
Study Hours
35h
1
Enrolled
1

CISM Exam Domains

1.

Information Security Governance

1 lessons

2.

Information Risk Management

1 lessons

3.

Information Security Program Development

2 lessons

4.

Information Security Incident Management

2 lessons

CRISC Exam Domains

1.

IT Risk Identification

2 lessons

2.

IT Risk Assessment

2 lessons

3.

Risk Response & Mitigation

2 lessons

4.

Risk & Control Monitoring and Reporting

2 lessons

Sample CISM Question

An organization's risk appetite defines:

A.Zero tolerance for any risk
B.Number of security staff needed
C.Maximum security spending
D.The level of risk the organization is willing to accept in pursuit of objectives

Enrol in the prep track to see the answer

Sample CRISC Question

Threat modeling during software development helps:

A.Identify security risks early when they're cheapest to fix
B.Reduce the need for testing
C.Eliminate all vulnerabilities
D.Speed up the development process

Enrol in the prep track to see the answer

Which One Should You Choose?

Exam cost: CISM (Certified Information Security Manager) is $760 vs CRISC (Certified in Risk and Information Systems Control) at $760. Factor in study materials and retake fees.

Both certifications are valuable. Your choice should depend on your career goals, current experience level, and the specific roles you're targeting.

How do you start preparing?

Both CISM and CRISC have a prep track with practice questions, a study plan and progress tracking. Enrolling in a track costs 30 credits.