CRISC - Exam preparation (study materials, tips, mindset, etc)

Hello world,

I'm preparing to sit for the CRISC exam either sometime in May or June. I'm currently using only the Q&A database review questions from ISACA and nothing else.

For those who've passed the exam, is this good enough to pass or should I purchase the CRM (CRISC Review Manaual) from ISACA as well?

Any input is greatly appreciated!

Find more posts tagged with

SAVE $250 on Your ISACA Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View ISACA Boot Camps

Comments

chickenlicken09

Navneet1972 wrote: »

hi is it possible to share the 2015 Manual for CRISC.... thanks

navnee i can share.

pr1988

Hi Rehana44,

Did you find out the answer? Can you please tell me if there is any difference between the Q&A book and online db?

pr1988

SecurityGuru23 wrote: »

Thanks! There were a mix bags of questions from both CISA (scenario-based) and ones similar to CRISC (fact-based) which IMO is similar to the Q&A DB questions from ISACA. It isn't as difficult as the CISA but that's up for debate. Good luck!

-SG

Congratulations SecurityGuru23!

I have completed my CISA last year and planning to take CRISC soon. I read that you have used only Q&A DB. Any idea if there is any difference between Q&A book and online DB?

Rehana44

Hey, i used only Q&A book and passed the exam with good score

Q&A book and online db has same set of questions but you will be able to give mock exams and all in online db like real exam experience i suppose. otherwise book would just suffice.

pr1988 wrote: »

Hi Rehana44,

Did you find out the answer? Can you please tell me if there is any difference between the Q&A book and online db?

asiru77

but i believe online DB has more questions then book (around 1000 vs 450 in book ) , please correct me if i am wrong

thanks

pr1988 wrote: »

Congratulations SecurityGuru23!

I have completed my CISA last year and planning to take CRISC soon. I read that you have used only Q&A DB. Any idea if there is any difference between Q&A book and online DB?

Teddyp15

asiru77 wrote: »

but i believe online DB has more questions then book (around 1000 vs 450 in book ) , please correct me if i am wrong

thanks

Hey There,

The ISACA online DB has 500 questions. Unless, there is an updated database that I'm unaware of.

scasc

Book has 500 questions and the DB has the same - got it confirmed from ISACA.

asiru77

scasc wrote: »

Book has 500 questions and the DB has the same - got it confirmed from ISACA.

Thanks to clarify, I already have book so it's useless to buy online DB in this case

dazman

Just passed CRISC today:
This email is being sent to notify you of your 6 November 2017 exam results. A scaled score of 450 or higher is required to pass, which represents the minimum consistent standard of knowledge as established by ISACA's CRISC Certification Working Group.

We are pleased to inform you that you successfully PASSED the exam with a total scaled score of 594. For your information, your exam results by area are provided below.

SCALED SCORES BY CONTENT AREA:

IT Risk Identification
629

IT Risk Assessment
549

Risk Response and Mitigation
647

Risk and Control Monitoring and Reporting
549

Not the best pass, it seems to be around the 82% mark as far as I can guesstimate.

I only used the two books. About 10 questions on the CBT exam seemed impossible to discern the correct answer to, so I hoping it was only those ones I'd got wrong. Still, not too bad and no retake fee and no re-study time, which is a massive relief.

darylco

Hi all
Im thinking of answering CRISC but have worked in Business Continuity and Disaster Recovery only. Will this be something which I will be able to clear?

Thanks

FSF150

darylco wrote: »

Hi all
Im thinking of answering CRISC but have worked in Business Continuity and Disaster Recovery only. Will this be something which I will be able to clear?

Thanks

BCP/DR will give you a strong foundation but CRISC is going to cover more than just that category. Not to say you couldn't pull it off but a lot of CRISC is "The ISACA Approach to Risk Management". I'd still encourage you to use the Manual/QAE.

Deepaknrn

I recently passed the CRISC exam, so I can share my experience. Using only the Q&A database can definitely help, but I wouldn’t rely on it alone. The exam is quite scenario-based, and many questions test how well you understand concepts rather than just recognizing answers.

The Q&A database is great for practice and identifying weak areas, but without a solid understanding of the domains, some questions can feel tricky. That’s where the CRISC Review Manual (CRM) can be useful, as it helps build your foundation and explains the concepts in more detail.

What worked for me was combining concept study with regular practice. I focused on understanding why an answer is correct instead of just memorizing it, and that made a big difference in the actual exam.

My suggestion:

Use the Q&A database for practice
Go through at least key sections of the CRM for concepts
Focus on understanding scenarios, not just answers

If you balance both, you should be well prepared for the exam.

Good luck