Certified in Risk and Information Systems Control

If Your Certified in Risk and Information Systems Control Application or Certification Is Revoked

Understand What “Revoked” Means

A revoked status means ISACA has canceled or withdrawn your Certified in Risk and Information Systems Control (CRISC) certification after it was issued, typically due to ethical violations, policy breaches, or noncompliance with ISACA’s professional standards. When your certification is revoked, you are no longer recognized as a CRISC credential holder and cannot claim, display, or use the certification until the issue is formally reviewed and resolved with ISACA.

Reasons for Revocation Of or Eligibility

Reasons a Certified in Risk and Information Systems Control (CRISC) Certification Can Be Revoked

Ethics or Code of Conduct Violation
ISACA may revoke the credential if a certified individual violates the ISACA Code of Professional Ethics, including dishonesty, misconduct, confidentiality breaches, or professional misrepresentation.

Fraudulent Information
Providing falsified or misleading information during certification application, renewal, or audit review can result in immediate cancellation of the CRISC certification.

Cheating or Exam Misconduct
Engaging in actions such as sharing or using unauthorized exam content, impersonation, using prohibited materials, or violating ISACA exam security policies may lead to permanent disqualification and revocation of the certification.

Failure to Maintain Certification
If a certificate holder fails to meet the Continuing Professional Education (CPE) requirements, neglects to submit CPE reports, or does not pay the annual maintenance fee, ISACA may suspend or revoke the CRISC credential.

Non-Compliance With ISACA Policies
Failure to comply with ISACA’s professional conduct standards, audit requests, documentation verification, or certification program requirements may result in the withdrawal of certification.

What to Do If Your Status Is Revoked

Review ISACA Notification
Carefully read the revocation notice sent by ISACA. It will explain why your CRISC certification was withdrawn and outline any steps, deadlines, or requirements you can follow to address the issue.

Contact ISACA
Reach out to ISACA through official certification support channels or the compliance team if you need clarification regarding the revocation or guidance on how to resolve the situation.

Submit an Appeal
If you believe the revocation was issued incorrectly or due to a misunderstanding, you can file a formal appeal with ISACA. Make sure to submit it within the timeframe specified in the notification.

Provide Supporting Evidence
Gather and submit documentation that supports your case. This may include communication records, exam verification details, proof of CPE completion, or any other materials demonstrating your compliance with ISACA certification policies and ethical standards.

If the Revocation Is Upheld

You will lose your CRISC certification or eligibility permanently in cases involving fraud, serious ethical violations, or misconduct.

You may be restricted from reapplying for certification for a specific period or indefinitely, depending on the severity of the violation.

Your name will be removed from ISACA’s official list of active CRISC credential holders, and you will no longer be authorized to use or claim the designation.

Prevent Revocation in the Future

Always provide accurate and verifiable information in your CRISC certification application, renewal, and any audits.

Follow ISACA’s Code of Professional Ethics and certification policies at all times.

Do not share, copy, or reproduce any exam content or ISACA-protected materials.

Keep your continuing professional education (CPE) requirements up to date and complete any required training, courses, or skill development before the annual or three-year deadlines.