CRISC: Certified in Risk and Information Systems Control

Controls are effective only when they are implemented consistently and mitigate the risks they were designed to address. Risk-assessment results identify and prioritize those risks, providing the essential basis for evaluating whether the controls remain appropriate and effective.