ISACA introduces new CRISC certification for risk professionals

ISACA, a global association of 86,000 IT audit, risk, governance and security professionals, is responding to market demand by introducing a new risk-related certification. The Certified in Risk and Information Systems Control (CRISC) designation is for IT professionals who identify and manage risks through the development, implementation and maintenance of information systems (IS) controls. These professionals help enterprises accomplish business objectives such as effective and efficient operations, reliable financial reporting, and compliance with regulatory requirements.

A grandfathering program, through which experienced professionals can earn the certification without passing an exam, will open in April. The first CRISC exam will be administered in 2011.

“The CRISC designation will demonstrate to employers that the certification holder is able to identify and evaluate the risks unique to their specific organization and help the enterprise accomplish its business objectives by designing, implementing, monitoring and maintaining risk-based, efficient and effective IS controls,” said Urs Fischer, chair of ISACA’s CRISC Task Force. “We conducted an extensive amount of research globally and found that enterprises are becoming more risk-aware and are looking to identify professionals who possess the skills to help them protect their assets and enhance their businesses. CRISC fills a gap that currently exists in the marketplace.”

CRISC complements ISACA’s three existing certifications: Certified Information Systems Auditor (CISA), established in 1978 and earned by more than 70,000 professionals since its inception; Certified Information Security Manager (CISM), earned by more than 12,000 professionals since it was launched in 2002; and the newer Certified in the Governance of Enterprise IT (CGEIT), earned by more than 4,000 professionals since it was developed in 2006.

“Risk management professionals can learn more about CRISC, the new Risk IT framework and the latest risk management best practices at Asia-Pacific CACS in Mumbai,” said Anand Shenoy, President of ISACA’s Mumbai Chapter.