Duration
4 days
Overview
Get ready for the CRISC exam with our top-quality preparation course.
In this course, you'll cover all four domains of the Certified in Risk and Information Systems Control (CRISC) exam and gain the knowledge and concepts required to obtain CRISC certification. Since its inception in 2010, the CRISC certification is for IT and business professionals who identify and manage risks through the development, implementation, and maintenance of appropriate information systems (IS) controls. Along with our custom course material, you will receive an assessment exam and a free copy of the CRISC Review Manual 2015.
What You'll Learn
- Risk identification
- IT risk assessment
- Risk response
- Risk control, monitoring, and reporting
Who Needs to Attend
- IT risk management professionals
- Control and assurance professionals
- CIOs and CISOs
Prerequisites
At least three years cumulative work experience performing tasks across at least three CRISC domains is recommended.
Certification Programs and Certificate Tracks
This course is part of the following programs or tracks:
CRISC - Certified in Risk and Information Systems Control
Course Outline
- 1. Introduction to the ISACA CRISC Exam
- Class Overview
- CRISC Domains
- Test Registration
- 2. Risk Identification
- Good Practices for Risk Management
- Components of Risk Management
- Methods for Risk Identification
- Risk Culture and Communication
- The Businesses IT Risk Structure
- Risk Principles and Concepts
- Vulnerabilities and Threats
- Assets
- Threats
- Vulnerabilities
- Vulnerability Assessment
- Pen Testing
- Probability/Likelihood
- IT Risk
- IT Risk Scenarios
- Ownership and Accountability
- Other Risk Concepts
- Risk Awareness
- 3. IT Risk Assessment
- Risk Assessment vs. Risk Identification
- Techniques for Risk Assessment
- Risk Scenarios
- Analyzing the Current State of Controls
- Risk and Control Analysis
- Risk Analysis Techniques
- Incident Response
- Business Risk
- Risk Associated with Enterprise Architecture
- Management of Data
- Emerging Technologies and Threats
- Industry Trends
- Third Party Management
- Project and Program Management
- SDLC
- Recovery and Business Continuity
- Risk Assessment Reports
- Ownership of Risk and Accountability
- Communication of Report Results
- 4. Risk Response
- Risk Response and Business Objectives Alignment
- Response Options
- Techniques for Analysis
- New Controls and Related Vulnerabilities
- A Risk Action Plan
- Techniques for BPR
- Design and Implementation of Controls
- Control Monitoring
- Inherent and Residual Risk
- Control Objectives Practices and Metrics
- Cryptography as a Control
- Control Design and Implementation
- Emerging Technologies and Controls
- Ownership of Controls
- Management Procedures and Documentation
- Response and Action Plan
- 5. Risk and Control Monitoring and Reporting
Key Risk Indicators
Risk Management Life Cycle
Key Performance and Goal Indicators
Data Collection and Extracting Techniques
Changes in Risk Profile
Monitoring Controls
Control Assessment Types
Control Assessment Results
Risk Profile Changes
- 6. Test Review
Key Risk Indicators
Test Review
Test Registration
Test Preparation
Certification Maintenance
Programme scope, delivery arrangements and suitability are confirmed during enquiry.