CRISC - Certified in Risk and Information Systems Control - 4 Days Training Course

Domain 1: Governance

• The significance of governance and its foundational principles
• Corporate governance and the role of risk governance
• Enterprise Risk Management (ERM) and the Risk Management Framework (RMF)
• IT risk-related policies, standards, and business processes

Domain 2: IT Risk Assessment

• Recognizing IT risk events and potential scenarios
• Threat modeling and vulnerability assessment
• Methodologies for risk assessment and business impact analysis
• Managing inherent and residual risks

Domain 3: Risk Response and Reporting

• Formulating effective risk response strategies
• Defining risk and control ownership
• Managing risks associated with third parties
• Strategies for risk reporting and stakeholder communication

Domain 4: Information Technology and Security

• IT and security frameworks and industry standards
• Designing and deploying information systems controls
• Ongoing control monitoring and maintenance
• Emerging trends and technologies in IT risk and control

Exam Preparation

• Comprehensive review of CRISC domains and knowledge areas
• Tactical exam-taking strategies and tips
• Mock exams and detailed question analysis
• Final review and Q&A session

Conclusion

• Summary of CRISC certification goals
• The strategic value of CRISC certification for individuals and organizations
• Guidance on scheduling the exam and maintaining certification

Assessment

• Post-domain quizzes to solidify learning
• Mock exams that simulate the actual CRISC testing environment
• Final evaluation to gauge readiness for the CRISC exam