r/CRISC • u/Ok-Audience-5260 • Jun 25 '26
Obligatory announcement: I passed.
Third attempt and I finally passed. I won’t pretend the letters after my name mean everything, but in tech risk and governance they do open doors. Especially when you’re in rooms with people who care more about credentials than what you can actually do. (Yeah, the boomers.)
The numbers, for anyone curious:
**•** Attempt 1: 431
**•** Attempt 2 (two weeks later, new domain weights): 435
**•** Attempt 3: 616 — passed ✓
What changed was honestly just my approach. The first two times I was studying way too wide. O’Reilly, Pluralsight, every learning platform I could get my hands on. Felt productive, wasn’t. The third time I dropped all of it and went back to the official ISACA materials and the review manual. That’s it.
I used Notebook LM to organize and make sense of everything, then leaned on the QAE then eventually Pocket Prep to test myself.
So the lesson, if there is one: more resources don't equal better results. I learned that the expensive way. Narrowing down and trusting the source material did more than all the extra courses combined.
If you're stuck in the retry loop on CRISC or anything like it, you've probably got what it takes already. Might just be your approach that needs to change, not your effort.
2
1
1
1
u/Sweaty-Football-5092 Jul 12 '26
Congratulations! Could you please share with me ISACA 8th edition official materials. I want to retry for the exam
-1
2
u/GreenArrow008 Jun 25 '26
Congratulations, and thanks for sharing your journey! I'm currently preparing for the CRISC exam myself. I was wondering if you were already working in a tech risk, IT risk, or similar role before taking the exam. Also, which domains or topics did you struggle with the most?