With ISACA announcing 1,000 CRISC certifications awarded under grandfathering provisions, CRISC is - whether you like it or not - something information risk professionals should consider.To help you, we've filtered through the blog-spam, sales pitches, and ill-informed opinion and pulled together some of the top resources from around the web - your one-stop resource guide for CRISC certification.
What is CRISC?
In ten words or less, its a professional certification for specialists in information systems risk and control.
A full explanation is available on ISACA's web site here - or read Riskmonkey's more readable but less authoritative summary (linked below).
Should I certify CRISC?
- The New School of Information Security claims to prove 'CRISC is stupid' - apparently we're just not mature enough for it. Author Mr Howell goes on in a later post to suggest that it is 'proving itself irrelevant'. We're not sure his google rankings are really proof of this, but time will tell.
- I also have questions about the CRISC concept, but sees the certification being of practical value in certain circumstances in our guide to CRISC. I also think it highlights weaknesses in CISA and CISM.
- Martin Dion offers an informed view that CRISC is a must for risk professionals, and thinks that despite a number of other risk management certifications coming on to the market (he notes ISO27005), there's plenty of space for CRISC, too.
- Some slightly off the wall commentators have considered that a project management certification might be better (we don't quite get that one), and that CRISC may also be useful for some accountants - as riskmonkey suggested, in fact.
How do I certify?
There are no end of companies on the internet advertising sample question banks for sale. There are also quite a few offering training. At the moment though, both are pretty much irrelevant - currently, the way in is through grandfathering - which requires 8 years experience. The application form doesn't take 8 minutes to complete, and is available here. At not far short of $500, paying for it will take most professionals a little longer than that, though. A tip: ask your employer to cough up the cash.
What do I do with it?
Put it on your business card, or on your CV. Use it to help argue for a pay rise or promotion. Or simply to help make sure you don't get downsized. Just don't forget to tell us what you think!
Can you CRISC? (26/8/2010)