Free CRISC — Certified in Risk and Information Systems Control Roadmap
Enterprise IT risk management on the current outline (from 3 November 2025): governance, risk assessment, risk response and reporting, and technology and security. The most risk-focused of the ISACA credentials. There is no current-outline CRISC course here and no CRISC practice tests yet: each step teaches its domain from our GRC and continuity courses.
4 steps · 10 free videos · 0 free reads
Create your free account to open all 2,396 free items
The 10 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.
4 steps, in order
The 🔒 rows show what the full roadmap adds at each step. StationX Membership opens every course and its labs: $299 / year ($24.92/mo billed annually).
Start here →
Step 1 — Governance
Domain 1 (26%): organisational governance, the risk universe, the three lines of defence and who owns which risk.
🔒 The full roadmap adds here: 1 full course (Membership)
- Course · Mastering Governance, Risk, and Compliance (GRC): A Handbook · 🔒 Membership
Try a free hacking lab: Recon to shell (~5 min) → A scripted simulation in your browser. No account needed.
Step 2 — Risk assessment
Domain 2 (22%): identify and assess IT risk — inherent risk, the existing controls, residual risk.
🔒 The full roadmap adds here: 1 full course (Membership)
- Course · Information Security Risk Management (ISO 27005) · 🔒 Membership
Step 3 — Risk response and reporting
Domain 3 (32%): choose the response, design and test the controls, and report on risk. The labs are the audit and control ones, among them Comparing Controls, and Monitoring and Verifying Management Systems.
🔒 The full roadmap adds here: 1 full course · hands-on labs 1–7 of 28 (Membership)
- Course · Governance, Risk and Compliance (GRC) · 🔒 Membership
- Lab 1 of 28 · Auditing Service Accounts and Setting Up Automated Log Collection · 🔒 Membership
- Lab 2 of 28 · CIRP Creation and Disaster · 🔒 Membership
- Lab 3 of 28 · Comparing Controls · 🔒 Membership
- Lab 4 of 28 · Creation of Standard Operating Procedures for Recovery · 🔒 Membership
- Lab 5 of 28 · Identifying Key Assets · 🔒 Membership
- Lab 6 of 28 · Monitoring and Verifying Management Systems · 🔒 Membership
- Lab 7 of 28 · Sensitive Information Identification · 🔒 Membership
Step 4 — Technology and security
Domain 4 (20%): business continuity and disaster recovery, and the security controls your risk responses rely on.
🔒 The full roadmap adds here: 1 full course · hands-on labs 8–28 of 28 (Membership)
- Course · Business Continuity and Disaster Recovery Planning · 🔒 Membership
- Lab 8 of 28 · Additional Scanning Options · 🔒 Membership
- Lab 9 of 28 · Basics of Metasploit · 🔒 Membership
- Lab 10 of 28 · BCP DRP and Test Planning · 🔒 Membership
- Lab 11 of 28 · BitLocker Setup · 🔒 Membership
- Lab 12 of 28 · Block Incoming Traffic on Known Port · 🔒 Membership
- Lab 13 of 28 · Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server · 🔒 Membership
- Lab 14 of 28 · Creation of BCP and DRP · 🔒 Membership
- Lab 15 of 28 · Data Backup to Prep for Recovery · 🔒 Membership
- Lab 16 of 28 · Event Log · 🔒 Membership
- Lab 17 of 28 · Host Data Integrity Baselining · 🔒 Membership
- Lab 18 of 28 · Installing Patches and Testing Software · 🔒 Membership
- Lab 19 of 28 · MITRE - Attack · 🔒 Membership
- Lab 20 of 28 · MITRE - Defend · 🔒 Membership
- Lab 21 of 28 · Network Discovery · 🔒 Membership
- Lab 22 of 28 · Network Segmentation (FW/DMZ/WAN/LAN) · 🔒 Membership
- Lab 23 of 28 · Network Topology Generation · 🔒 Membership
- Lab 24 of 28 · Open Source Collection · 🔒 Membership
- Lab 25 of 28 · Open Source Password Cracking · 🔒 Membership
- Lab 26 of 28 · Scanning From Windows · 🔒 Membership
- Lab 27 of 28 · Windows Event Log Manipulation via Windows Event Viewer · 🔒 Membership
- Lab 28 of 28 · Wireshark · 🔒 Membership
The full CRISC — Certified in Risk and Information Systems Control roadmap
The same steps with every course and the hands-on labs, and your progress tracked.
The full roadmap with labs →What Membership includes · Full refund within 30 days if you haven't started a lab · cancel anytimeAI-Driven Security Engineering
StationX’s AI Master’s teaches you to create and deploy security solutions by directing AI. “No coding background required. You direct the AI; the AI does the building.”
Explore the AI Master’s →Create your free account to open all 2,396 free items
The 10 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.