CRISC - Certified in Risk and Information Systems Control - 4 Days Training Course

Domain 1: Governance

• Comprehending the significance of governance in IT.
• Exploring organizational and risk governance structures.
• Reviewing Enterprise Risk Management (ERM) and the Risk Management Framework (RMF).
• Examining policies, standards, and business processes tied to IT risk.

Domain 2: IT Risk Assessment

• Recognizing potential IT risk events and scenarios.
• Applying threat modeling and vulnerability analysis techniques.
• Utilizing risk assessment methods and business impact analysis.
• Managing both inherent and residual risks.

Domain 3: Risk Response and Reporting

• Formulating effective risk response strategies.
• Defining clear ownership for risks and controls.
• Addressing third-party risk management.
• Ensuring proper risk reporting and communication.

Domain 4: Information Technology and Security

• Studying IT and security frameworks alongside industry standards.
• Planning and executing information systems controls.
• Monitoring and maintaining control effectiveness.
• Staying current with trends and emerging technologies in IT risk and control.

Exam Preparation

• A comprehensive review of CRISC domains and core knowledge areas.
• Strategies and tips for successful exam performance.
• Completion of practice exams with detailed question analysis.
• A final review session including Q&A.

Wrap-Up

• A summary of the CRISC certification objectives.
• Discussion on how CRISC certification adds value to professionals and their organizations.
• Guidance on next steps for sitting the CRISC exam and maintaining certification status.

Assessment Methods

• End-of-domain quizzes to solidify learning outcomes.
• Mock exams designed to replicate the actual CRISC certification test.
• A final evaluation to gauge readiness for the CRISC exam.