The most recent edition of CRISC concentrates on risk reporting and response, risk assessment, governance, and IT security. Specialization in these domains makes an individual most eligible for taking charge of a business organization’s IT responsibilities.