› Certifications · compare
Compare certifications
Pick up to 3 certifications and compare them side-by-side on cost, exam format, recertification, salary signal, quality, and domain coverage.
ISC2 · professional
CGRC(ISC)2 Certified in Governance, Risk and Compliance
(ISC)2 Certified in Governance, Risk and Compliance
Official pageISACA · professional
CRISCCertified in Risk and Information Systems Control
Enterprise risk identification, assessment, and response + IT controls.
Official pageComparing
ISC2CGRC
ISACACRISC
› Cost
Exam fee
CGRC$599
CRISC$760
Exam fee
$599
$760
Annual maintenance fee
CGRC$125/yr
CRISC$45/yr
Annual maintenance fee
$125/yr
$45/yr
3-year cost of ownership
CGRC$974
CRISC$895
3-year cost of ownership
$974
$895
› Exam mechanics
Pass mark
CGRC700/1000 (scaled)
CRISC450/800 (scaled)
Pass mark
700/1000 (scaled)
450/800 (scaled)
Retake policy
CGRC$599 fee · 30d wait · 4/yr cap
CRISC$575 fee · 30d wait · 4/yr cap
Retake policy
$599 fee · 30d wait · 4/yr cap
$575 fee · 30d wait · 4/yr cap
Study time
CGRC60–120 hrs
CRISC100–200 hrs
Study time
60–120 hrs
100–200 hrs
Validity
CGRC3 yrs
CRISC3 yrs
Validity
3 yrs
3 yrs
CPE / yr
CGRC20 CPEs
CRISC40 CPEs
CPE / yr
20 CPEs
40 CPEs
Delivery
CGRCtest center
CRISCtest center
Delivery
test center
test center
› Salary signal (US base)
Range
CGRC$105K – $160K
CRISC$115K – $165K
Range
$105K – $160K
$115K – $165K
Median
CGRC$130,000
CRISC$135,000
Median
$130,000
$135,000
Premium %
CGRC—
CRISC+9%
Premium %
—
+9%
Role context
CGRCFederal/regulated GRC analyst, US, 4-7 years.
CRISCIT risk analyst / IT risk manager, US, 5+ years.
Role context
Federal/regulated GRC analyst, US, 4-7 years.
IT risk analyst / IT risk manager, US, 5+ years.
› Quality (4-axis rubric · 0–10)
Schema quality
CGRC7.5
CRISC8.5
Schema quality
7.5
8.5
Practice evidence
CGRC1.5
CRISC1.0
Practice evidence
1.5
1.0
Maintenance
CGRC7.0
CRISC7.5
Maintenance
7.0
7.5
Market recognition
CGRC6.0
CRISC7.0
Market recognition
6.0
7.0
Average
CGRC5.5
CRISC6.0
Average
5.5
6.0
› Recognition & lifecycle
Recognition
CGRCGlobal
CRISCGlobal · US · EU · UK · DACH
Recognition
Global
Global · US · EU · UK · DACH
ISO 17024 accredited
CGRC—
CRISC✓
ISO 17024 accredited
—
✓
DoD 8140 baseline
CGRC—
CRISC—
DoD 8140 baseline
—
—
Holders worldwide
CGRC—
CRISC30,000
Holders worldwide
—
30,000
Current version
CGRC2024 CBK refresh (2024-04)
CRISC2021 job-practice analysis (2021-08)
Current version
2024 CBK refresh (2024-04)
2021 job-practice analysis (2021-08)
› Domain coverage
A1Governance, Risk & Compliance
CGRC● core
CRISC● core
A1Governance, Risk & Compliance
● core
● core
A13Supply Chain Security
CGRC·
CRISC○ touched
A13Supply Chain Security
·
○ touched
A18Security Leadership
CGRC·
CRISC● core
A18Security Leadership
·
● core
C7AI Governance & Risk
CGRC·
CRISC○ touched
C7AI Governance & Risk
·
○ touched
Browse the full catalog or open any one of these on its detail page for full study materials, peer comparisons, and lifecycle notes.