Certified in Risk and Information Systems Control (CRISC)

Course Overview

Domain 1: Governance

• Risk Assessment Concepts, Standards and Frameworks
• Organizational Strategy, Goals and Objectives
• Organizational Structure, Roles and Responsibilities
• Organizational Culture and Assets
• Policies, Standards and Business Processes
• Enterprise Risk Management, Risk Management Frameworks and Three Lines of Defense
• Risk Profile, Risk Appetite and Risk Tolerance
• Navigating Professional Ethics of Risk Management and Requirements in Laws, Regulations and Controls

Domain 2: IT Risk Assessment

• Risk Events, Threat Modeling and Threat Landscape
• Vulnerability and Control Deficiency Analysis
• Risk Scenario Development
• Risk Register
• Risk Analysis Methodologies
• Business Impact Analysis
• Inherent, Residual and Current Risk

Domain 3: Risk Response and Reporting

• Risk Treatment/Risk Response Options
• Risk and Control Ownership
• Managing Risk from Processes, Third Parties and Emerging Sources
• Control Types, Standards and Frameworks
• Control Design, Selection and Analysis
• Control Implementation, Testing and Effectiveness
• Risk Treatment Plans
• Data Collection, Aggregation, Analysis and Validation
• Risk and Control Monitoring and Reporting Techniques
• Performance, Risk and Control Metrics

Domain 4: Information Technology and Security

• Enterprise Architecture
• IT Operations Management
• Project Management
• Disaster Recovery Management
• Data Life Cycle Management
• System Development Life Cycle
• Emerging Technologies
• Information Security Concepts, Frameworks, Standards and Awareness Training
• Business Continuity Management
• Data Privacy and Protection Principles

• nvironment to relevant stakeholders to enable decision making.

Course Comments

aslo see  KT-ISACA