ISACA
Certified in Risk and Information Systems Control
Prepare for CRISC, ISACA's certification in IT risk and control.
3 daysIntermediate4 modulesCertified in Risk and Information Systems Control® (CRISC®)
About this course
Prepare for CRISC, ISACA's certification in IT risk and control. Over three days you will cover governance, IT risk assessment with threat modelling and risk scenarios, risk response and reporting, and information technology and security, linking risk to business strategy.
What you'll learn
- Identify and assess IT and enterprise risk in support of strategic business goals
- Recommend and implement appropriate information security and IS controls
- Build risk response and mitigation plans aligned to business priorities
- Establish governance processes for continuous monitoring and reporting
- Prepare for the CRISC certification exam through real-world examples, CRISC exam prep , and sample CRISC questions
Curriculum
4 modules
- Risk Assessment Concepts, Standards and Frameworks
- Organizational Strategy, Goals and Objectives
- Organizational Structure, Roles and Responsibilities
- Organizational Culture and Assets
- Policies, Standards and Business Processes
- Enterprise Risk Management, Risk Management Frameworks and Three Lines of Defense
- Risk Profile, Risk Appetite and Risk Tolerance
- Navigating Professional Ethics of Risk Management and Requirements in Laws, Regulations and Controls
- Risk Events, Threat Modeling and Threat Landscape
- Vulnerability and Control Deficiency Analysis
- Risk Scenario Development
- Risk Register
- Risk Analysis Methodologies
- Business Impact Analysis
- Inherent, Residual and Current Risk
- Risk Treatment/Risk Response Options
- Risk and Control Ownership
- Managing Risk from Processes, Third Parties and Emerging Sources
- Control Types, Standards and Frameworks
- Control Design, Selection and Analysis
- Control Implementation, Testing and Effectiveness
- Risk Treatment Plans
- Data Collection, Aggregation, Analysis and Validation
- Risk and Control Monitoring and Reporting Techniques
- Performance, Risk and Control Metrics
- Enterprise Architecture
- IT Operations Management
- Project Management
- Disaster Recovery Management
- Data Life Cycle Management
- System Development Life Cycle
- Emerging Technologies
- Information Security Concepts, Frameworks, Standards and Awareness Training
- Business Continuity Management
- Data Privacy and Protection Principles
Who it's for
IT risk, control and compliance professionals and risk managers.
Before you start
- As part of the CRISC prerequisites, candidates must have a minimum of three years of professional work experience in information systems auditing, control, or security
Prepares for
Related courses
More in ISACA →Advanced
Advanced in AI Audit (AAIA)
ISACA
View course →Advanced
Advanced in AI Risk (AAIR)
ISACA
View course →Advanced
Advanced in AI Security Management (AAISM)
ISACA
View course →Intermediate
Certificate of Cloud Auditing Knowledge (CCAK)
ISACA
View course →Intermediate
Certified Cybersecurity Operations Analyst (CCOA)
ISACA
View course →Intermediate
Certified Data Privacy Solutions Engineer (CDPSE)
ISACA
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.