Certification · CRISC · Released October 2026

CRISC Exam Guide by Kai London

This exam guide takes you through the knowledge CRISC expects, area by area, in clear language — with worked examples, exam tips and practice questions so you can check your progress as you go.

What the book covers

Governance

Organisational governance and risk governance.

IT risk assessment

Identifying, analysing and evaluating IT risk.

Risk response and reporting

Treating risk, control design and risk reporting.

Technology and security

Information technology and security principles for risk practitioners.

Scenario reasoning

How CRISC questions expect you to think about risk.

Practice and review

End-of-chapter questions with explanations, plus a final review checklist.

This is an independent study aid. It is not affiliated with, sponsored or endorsed by ISACA; exam names are trademarks of their owners. Always check the current official exam outline.

CRISCIT riskCertificationControls

Who it is for

CRISC candidates, IT risk managers and control professionals.

About the author

Professor Kai London — CISSP, CISM.

An internationally recognised cybersecurity executive, board advisor and Founder & CEO of Quantum AI Systems Security LLC, writing at the convergence of AI, governance and operational resilience. Honorary Professor and Researcher at UCL.