CRISC - Certified in Risk and Information Systems Control - 4 Days Training Course

Domain 1: Governance

• Appreciating the role and significance of governance
• Organizational and risk governance structures
• Enterprise Risk Management (ERM) and the Risk Management Framework (RMF)
• IT risk-related policies, standards, and business processes

Domain 2: IT Risk Assessment

• Recognizing IT risk events and potential scenarios
• Threat modelling and vulnerability evaluation
• Risk assessment methodologies and business impact analysis
• Managing inherent and residual risks

Domain 3: Risk Response and Reporting

• Formulating risk response strategies
• Defining ownership of risks and controls
• Managing third-party risks
• Risk reporting and stakeholder communication

Domain 4: Information Technology and Security

• IT and security frameworks and industry standards
• Architecting and deploying information systems controls
• Monitoring and maintaining controls
• Emerging trends and technologies in IT risk and control

Exam Preparation

• Review of CRISC domains and core knowledge areas
• Strategies and tips for the examination
• Mock exams and detailed question analysis
• Comprehensive review and Q&A session

Conclusion

• Summary of CRISC certification goals
• Discussion on the professional and organizational value of the CRISC credential
• Guidance on next steps for sitting the CRISC exam and maintaining certification

Assessment

• Domain-specific quizzes to consolidate learning
• Mock exams that mimic the CRISC certification test
• Final evaluation to determine exam readiness