CRISC - Certified in Risk and Information Systems Control - 4 Days Training Course

Domain 1: Governance

• Exploring the significance of governance and its role.
• Organizational governance alongside risk governance.
• Enterprise Risk Management (ERM) and the Risk Management Framework (RMF).
• IT risk-related policies, standards, and business workflows.

Domain 2: IT Risk Assessment

• Recognizing IT risk events and potential scenarios.
• Applying threat modeling and vulnerability analysis.
• Using risk assessment techniques and conducting business impact analysis.
• Managing both inherent and residual risks.

Domain 3: Risk Response and Reporting

• Formulating effective risk response strategies.
• Defining risk and control ownership.
• Overseeing third-party risk management.
• Communicating risk reports and updates.

Domain 4: Information Technology and Security

• Studying IT and security frameworks and standards.
• Creating and deploying information systems controls.
• Monitoring and maintaining control effectiveness.
• Keeping up with emerging technologies and trends in IT risk and control.

Exam Readiness

• Revisiting CRISC domains and key knowledge areas.
• Applying exam-taking tactics and best practices.
• Taking practice exams and analyzing questions.
• Conducting a final review and Q&A session.

Wrap-Up

• Summarizing the goals of the CRISC certification.
• Exploring the benefits of CRISC certification for individuals and enterprises.
• Planning next steps for sitting the CRISC exam and maintaining the credential.

Evaluation

• End-of-domain quizzes to solidify understanding.
• Simulated practice exams mirroring the actual CRISC test.
• A final assessment to gauge exam readiness.