EIEIOTECHNOVATION
← Training programmes

EIEIO / CYBERSECURITY

CRISC®

Course outline

3 days

Duration

3 days

Learning Outcomes

For organisations, employing CRISC professionals brings great benefits such as

  • Build greater understanding about the impact of it risk and how it relates to the overall organisation;
  • Assure development of more effective plans to mitigate risk; &
  • Establish a common perspective and language about it risk that can set the standard for the enterprise

With a growing demand for professionals with risk and control skills, it is a great time to gain a globally recognised certification in this field. Becoming CRISC certified will:

  • Demonstrate your knowledge and expertise in risk management.
  • Increase your value within your organisation.
  • Provide a gateway to more strategic level roles.
  • Maintain your high level of professionalism through continuing professional education.

Who Should Attend

The CRISC certification is designed for:

  • IT professionals
  • Risk professionals
  • Compliance professionals
  • Project managers
  • Control professionals
  • Business analysts

Course Contents

This course provides intensive revision across all 4 CRISC job practice domains.

Domain 1 — Risk Management

  • Collect and review environmental risk data
  • Identify potential vulnerabilities to people, processes and assets
  • Develop IT scenarios based on information and potential impact to the organisation
  • Identify key stakeholders for risk scenarios
  • Establish risk register
  • Gain senior leadership and stakeholder approval of the risk plan
  • Collaborate to create a risk awareness program and conduct training

Domain 2 – IT Risk Assessment

  • Analyse risk scenarios to determine likelihood and impact
  • Identify current state of risk controls and their effectiveness
  • Determine gaps between the current state of risk controls and the desired state
  • Ensure risk ownership is assigned at the appropriate level
  • Communicate risk assessment data to senior management and appropriate stakeholders
  • Update the risk register with risk assessment data

Domain 3 – Risk Response and Mitigation

  • Align risk responses with business objectives
  • Develop, consult with and assist risk owners with development risk action plans
  • Ensure risk mitigation controls are managed to acceptable levels
  • Ensure control ownership is appropriately assigned to establish accountability
  • Develop and document control procedures for effective control
  • Update the risk register
  • Validate that risk responses are executed according to risk action plans

Domain 4 – Risk and Control Monitoring and Reporting

  • Risk and control monitoring and reporting
  • Define key risk indicators (KRIs) and identify key performance indicators (KPIs) to enable performance measurement
  • Determine the effectiveness of control assessments
  • Identify and report trends/changes to KRIs/KPIs that affect control performance or the risk profile

Final Session - CRISC Sample Exam Questions

Programme scope, delivery arrangements and suitability are confirmed during enquiry.