ISACA CRISC Practice Test
Use five free mixed sets to check your judgment across the current four-domain CRISC outline, then drill a weak domain on its own. Each free test has 20 questions and about 32 minutes, matching the live exam pace of 240 minutes for 150 questions.
Mixed set — CRISC Practice Tests
Twenty questions spread across Governance, Risk Assessment, Risk Response and Reporting, and Technology and Security. The mix follows the current weighting, so the 32% domain shows up most often.
Domain-wise — CRISC Practice Tests
Use a focused set after a mixed test shows you where the misses are coming from. Each one stays inside a single current CRISC domain.
Twenty questions finds the weak decision.
One hundred fifty tests whether your judgment holds for four hours.
The free sets are built for quick diagnosis. Move to a full-length test when you want the complete 150-question, 240-minute workload across all four current CRISC domains.
| Free tests on this page | Full-length tests | |
|---|---|---|
| Questions | 20 | 150 |
| Time limit | About 32 minutes | 240 minutes |
| Coverage | Mixed four-domain set or one domain | All four domains at 26 / 22 / 32 / 20 |
| Score you get | Not claimed on this hub | Practice-score model not claimed here |
| Per-domain breakdown | Not claimed on this hub | Not claimed on the full-length page |
| Choose-TWO | No — CRISC uses one best answer | No — one best answer throughout |
| Exam conditions | Short timed practice | 150-question, 240-minute fixed-form practice |
| Report / review | Not claimed on this hub | Explanation attached to every question |
| Number available | 9 free tests | 10 full-length tests |
| Price | Free | From $3.49₹139£2.79€3.19 per test |
How to use these tests
Use the short sets to decide what to study next. Save the four-hour papers for the point where pacing and concentration become part of the problem.
Benchmark
Take two mixed sets before changing your study plan. Look for the same type of mistake showing up twice.
Start Practice Test 1 →Drill the gap
Move into the domain that cost you the most. Work there until the distinction behind the wrong answers stops being a surprise.
Start with Domain 3 →Run the full paper
When the short sets are stable, sit a 150-question practice test on the full 240-minute clock. That exposes pacing problems a 20-question set cannot.
Get Full-Length Tests →About the ISACA CRISC exam
The current CRISC outline has been in force since 3 November 2025. It keeps four domains, with Risk Response and Reporting carrying the largest share at 32%.
What CRISC measures
CRISC is built around information systems risk and control decisions. The current outline covers governance, risk assessment, risk response and reporting, and technology and security. The question style is one-best-answer multiple choice, so several options can be reasonable while one fits the business objective, ownership, sequence, or risk context better.
Exam format
Delivery: Computer-based through PSI testing centres or remote proctoring.
Questions: 150 multiple-choice questions.
Duration: 4 hours / 240 minutes.
Passing score: 450 on ISACA's 200–800 scale.
Exam fee: US$575 for ISACA members and US$760 for non-members.
Retakes: Up to four attempts in a rolling 12-month period. The waits after unsuccessful attempts are 30 days, then 90 days, then 90 days.
Certification requirements
Exam access: You can take the CRISC exam before meeting the work-experience requirement.
Experience: At least three years of CRISC professional work experience across at least two of the four domains.
Experience window: The qualifying work must fall within the 10 years before the certification application.
Application: Apply within five years of passing and pay the US$50 processing fee.
Maintenance: At least 20 CPE hours each year and 120 over a three-year reporting cycle.
Annual maintenance fee: US$45 for ISACA members and US$85 for non-members.
CRISC domain weights — current exam outline
The 2025 outline changed the distribution but kept the same four domain names. A 150-question practice test maps those weights to 39, 33, 48 and 30 questions.
| Domain | Topic | ISACA weight | Questions per 150 |
|---|---|---|---|
| Domain 1 | Governance | 26% | 39 |
| Domain 2 | Risk Assessment | 22% | 33 |
| Domain 3 | Risk Response and Reporting | 32% | 48 |
| Domain 4 | Technology and Security | 20% | 30 |
How our CRISC practice tests are written
One best answer. CRISC questions are built around professional judgment, not multiple-response selection. Each item gives four options and asks for the best one.
Business risk first. Technical facts can appear in a scenario, but the decision usually comes back to governance, risk ownership, treatment, control effectiveness, monitoring, or reporting.
Current weighting. Mixed sets follow 26 / 22 / 32 / 20. The full-length bank maps that to 39 / 33 / 48 / 30 questions so every paper uses the same domain shape.
Original practice material. The question bank is written against the current CRISC examination content outline. It is not a collection of recalled live-exam questions.
CRISC exam preparation tips
Study strategy
Spend time in proportion to the blueprint. Risk Response and Reporting is 32% of the exam. It deserves more study time than the 20% Technology and Security domain.
Learn the ownership distinctions. Risk owner, control owner and process owner are not interchangeable. Many CRISC scenarios turn on who should decide, approve, monitor, or act.
Practise the decision, not the definition. Knowing what residual risk means is only the start. You need to decide what should happen when residual risk sits above tolerance, evidence is incomplete, or a treatment plan slips.
Test-taking strategy
Read the qualifier. BEST, MOST, FIRST and PRIMARY change the task. Two options can be valid actions while only one belongs at that point in the sequence.
Keep the clock moving. Four hours for 150 questions is about 96 seconds per question. A five-minute argument with one item has to be paid back later.
Answer every question. ISACA does not apply negative marking for incorrect answers, so a blank gives away a chance without protecting your score.
Frequently asked questions
Start short. Go full length when the clock becomes part of the test.
Use a free 20-question set to find the weak domain. Then sit a 150-question, 240-minute CRISC practice test when you want the full workload.
