CRISC - Certified in Risk and Information Systems Control - 4 Days Training Course

Domain 1: Governance

• Appreciating the role of governance and its strategic importance.
• Organisational governance versus risk governance.
• Enterprise Risk Management (ERM) and the Risk Management Framework (RMF).
• IT risk policies, standards, and related business processes.

Domain 2: IT Risk Assessment

• Identifying potential IT risk events and scenarios.
• Threat modelling and vulnerability assessment.
• Assessment methodologies and business impact analysis.
• Managing inherent and residual risk.

Domain 3: Risk Response and Reporting

• Formulating effective risk response strategies.
• Establishing risk and control ownership.
• Managing third-party risk.
• Risk reporting and stakeholder communication.

Domain 4: Information Technology and Security

• IT and security frameworks and industry standards.
• Designing and implementing information systems controls.
• Monitoring and maintaining controls.
• Emerging trends and technologies in IT risk and control.

Exam Preparation

• Comprehensive review of CRISC domains and knowledge areas.
• Strategies and tips for exam success.
• Practice exams and detailed question analysis.
• Final wrap-up and Q&A session.

Conclusion

• Summary of CRISC certification objectives.
• The professional and organisational value of CRISC certification.
• Guidance on taking the CRISC exam and maintaining certification.

Assessment

• End-of-domain quizzes to consolidate learning.
• Mock exams mirroring the CRISC certification format.
• A final assessment to gauge readiness for the CRISC exam.