Failing the CRISC exam is disappointing, but it's not the end of your certification journey. Many successful CRISC holders passed on their second or third attempt after refining their study approach. This guide explains exactly what happens after a failed attempt and how to maximize your chances of passing next time.
Retake Policy Overview
ISACA has implemented a structured retake policy to protect exam integrity while giving candidates multiple opportunities to pass. Here's what you need to know:
| Policy Element | Details |
|---|---|
| Total Attempts Allowed | 4 attempts within a rolling 12-month period |
| 12-Month Period Starts | From the date of your first attempt |
| Lifetime Limit | No limit—you can try again after 12 months reset |
| Registration Fee | Must pay full fee for each attempt |
| Scheduling | Schedule as soon as waiting period ends |
The 12-month period is "rolling"—it starts from your first attempt, not from each individual attempt. So if your first attempt was January 15, you can make up to 4 attempts total until January 14 of the following year, subject to the waiting periods between each attempt.
Waiting Periods Explained
ISACA requires specific waiting periods between attempts to ensure candidates have adequate time to study and improve:
| Attempt | Waiting Period | Earliest Possible Date (Example) |
|---|---|---|
| 1st Attempt | None | January 15 |
| 2nd Attempt (Retake 1) | 30 days after 1st attempt | February 14 |
| 3rd Attempt (Retake 2) | 90 days after 2nd attempt | May 15 |
| 4th Attempt (Retake 3) | 90 days after 3rd attempt | August 13 |
Don't just wait—use the waiting period to study. The 30-90 day gaps are designed to give you time to address weaknesses. Candidates who simply reschedule without changing their approach often fail again. Treat each waiting period as a focused study sprint targeting your weak domains.
Retake Costs Breakdown
Each retake requires payment of the full exam registration fee. There are no discounted retake prices or "second chance" vouchers from ISACA.
If you're not already an ISACA member and expect you might need a retake, join ISACA before your first attempt. Annual membership is $145 (or $45 for students), but you save $185 per exam attempt. If you need even one retake, membership pays for itself immediately.
Understanding Your Score Report
After failing the CRISC exam, you'll receive a score report that can guide your retake preparation:
What You'll Receive
- Immediate on-screen result: Pass/Fail status shown immediately after completing the exam
- Email score report: Detailed results sent within 10 business days
- Total scaled score: Your score on the 200-800 scale (450 needed to pass)
- Domain-level performance: How you performed in each of the four CRISC domains
How to Use Your Score Report
Your domain-level results are the most valuable part of the score report. They show where you need to focus:
| Domain | Weight | If You Scored Low... |
|---|---|---|
| Domain 1: Governance | 26% | Review ERM frameworks, risk appetite, three lines of defense |
| Domain 2: IT Risk Assessment | 22% | Focus on risk identification, assessment methodologies |
| Domain 3: Risk Response | 32% | Master the four risk responses, control implementation |
| Domain 4: IT & Security | 20% | Review BCP/DRP, access controls, incident management |
Requesting a Rescore
If you believe there was an error in scoring, ISACA offers a rescore option:
| Rescore Details | Information |
|---|---|
| Request Deadline | Within 30 days of receiving results |
| Fee | $75 USD |
| How to Request | Submit through support.isaca.org |
| Required Information | Name, ISACA ID, mailing address |
| Typical Outcome | Rescores rarely change results significantly |
Rescores rarely result in score changes significant enough to turn a fail into a pass. ISACA's scoring is highly automated and accurate. Unless you experienced a technical issue during testing or your score was extremely close to 450, your time and money are better spent preparing for a retake than requesting a rescore.
Strategies to Pass Next Time
Failing once doesn't mean you'll fail again—but you need to change your approach. Here are proven strategies from candidates who passed on their second attempt:
Frequently Asked Questions
You can take the CRISC exam up to 4 times within a rolling 12-month period (1 initial attempt + 3 retakes). After the 12-month period resets, you can attempt again. There's no lifetime limit on total attempts.
After your first failed attempt: 30 days. After your second and third failed attempts: 90 days each. These waiting periods are mandatory—you cannot schedule a retake before the waiting period ends.
Yes—ISACA requires payment of the full exam registration fee for each attempt. There are no discounted retake fees. Members pay $575 per attempt; non-members pay $760. This is why ISACA membership often makes financial sense if you anticipate needing a retake.
If you fail all 4 attempts within your 12-month period, you must wait until that period expires before attempting again. The 12-month clock started from your first attempt. Once it resets, you get 4 new attempts. There's no permanent ban or additional penalty.
No—ISACA only shares exam results with you. Your employer has no way to know whether you passed or failed unless you tell them. Many professionals don't inform their employers until they've successfully passed.
Yes, you can request a rescore within 30 days of receiving results for a $75 fee. However, rescores rarely change outcomes significantly. ISACA's automated scoring is highly accurate. Unless you experienced a technical issue, your time is better spent preparing for a retake.
Keep what worked, but add different resources for your weak areas. If you only used the CRISC Review Manual, add video courses or a study group. If you used third-party materials, add official ISACA resources. Different explanations can help concepts click.
ISACA doesn't publish official retake pass rates. However, anecdotal evidence from forums and communities suggests that candidates who significantly change their study approach (more practice questions, different resources, targeted domain review) have good success on their second attempt. Those who just "study more of the same" often fail again.
Failing the CRISC exam is a setback, not a defeat. Many certified professionals—including successful CISOs and risk directors—didn't pass on their first attempt. Use the waiting period wisely, target your weak areas, and approach your retake with a smarter strategy. With focused preparation, you'll be ready to pass.
Prepare for Your CRISC Retake
Practice with realistic exam questions and detailed explanations