CRISC - Certified in Risk and Information Systems Control - 4 Days Training Course

Domain 1: Governance

• Exploring the concept of governance and its significance.
• Examining organizational governance and risk governance frameworks.
• Overview of Enterprise Risk Management (ERM) and the Risk Management Framework (RMF).
• Reviewing policies, standards, and business processes pertinent to IT risk.

Domain 2: IT Risk Assessment

• Identifying potential IT risk events and scenarios.
• Applying threat modeling and vulnerability analysis techniques.
• Utilizing risk assessment methodologies and business impact analysis.
• Managing inherent and residual risks.

Domain 3: Risk Response and Reporting

• Formulating effective risk response strategies.
• Defining risk and control ownership.
• Addressing third-party risk management.
• Enhancing risk reporting and communication practices.

Domain 4: Information Technology and Security

• Studying IT and security frameworks and standards.
• Designing and deploying information systems controls.
• Monitoring and maintaining control effectiveness.
• Tracking current trends and emerging technologies in IT risk and control.

Exam Preparation

• Revisiting CRISC domains and key knowledge areas.
• Discussing exam-taking strategies and essential tips.
• Engaging in practice exams and analyzing questions.
• Conducting a final review and Q&A session.

Conclusion

• Summarizing the core objectives of the CRISC certification.
• Discussing the professional and organizational value of CRISC certification.
• Outlining next steps for sitting the CRISC exam and maintaining certification.

Assessment

• End-of-domain quizzes to consolidate learning.
• Simulated practice exams mirroring the CRISC certification exam.
• Final assessment to gauge readiness for the CRISC exam.