CRISC - Certified in Risk and Information Systems Control - 4 Days Training Course

Domain 1: Governance

• Exploring the significance of governance.
• Organizational and risk governance structures.
• Enterprise Risk Management (ERM) and the Risk Management Framework (RMF).
• IT risk-related policies, standards, and business processes.

Domain 2: IT Risk Assessment

• Identifying potential IT risk events and scenarios.
• Threat modeling and vulnerability analysis techniques.
• Applying risk assessment methodologies and conducting business impact analysis.
• Managing inherent and residual risks.

Domain 3: Risk Response and Reporting

• Formulating effective risk response strategies.
• Establishing clear ownership of risks and controls.
• Overseeing third-party risk exposure.
• Communicating risk reports and insights.

Domain 4: Information Technology and Security

• Reviewing IT and security frameworks and standards.
• Designing and executing information systems controls.
• Maintaining and monitoring control effectiveness.
• Tracking current trends and emerging technologies in IT risk and control.

Exam Preparation

• Reviewing CRISC domains and key knowledge areas.
• Applying exam-taking strategies and tips.
• Working through practice exams and analyzing questions.
• Conducting a final review and Q&A session.

Conclusion

• Summarizing the objectives of CRISC certification.
• Discussing the professional and organizational value of holding a CRISC certification.
• Outlining next steps for sitting the CRISC exam and maintaining the credential.

Assessment

• End-of-domain quizzes to solidify learning outcomes.
• Mock exams to mirror the actual CRISC certification experience.
• A final assessment to gauge readiness for the CRISC exam.