ISACA introduces a new certification exam, Certified in Risk and Information Systems Control (CRISC), is designed for IT professionals who have hands-on experience with risk identification, assessment, and evaluation; risk response; risk monitoring; IS control design and implementation; and IS control monitoring and maintenance.