CRISC - Certified in Risk and Information Systems Control - 4 Days Training Course

Domain 1: Governance

• Appreciating governance and its critical importance
• Organisational governance and risk governance frameworks
• Enterprise Risk Management (ERM) and Risk Management Framework (RMF)
• Policies, standards, and business processes associated with IT risk

Domain 2: IT Risk Assessment

• Identifying potential IT risk events and scenarios
• Threat modelling and vulnerability analysis techniques
• Risk assessment methodologies and business impact analysis
• Managing inherent and residual risks

Domain 3: Risk Response and Reporting

• Formulating effective risk response strategies
• Establishing risk and control ownership
• Managing third-party risks
• Risk reporting and stakeholder communication

Domain 4: Information Technology and Security

• IT and security frameworks and industry standards
• Designing and implementing information systems controls
• Monitoring and maintaining control effectiveness
• Emerging trends and technologies in IT risk and control

Exam Preparation

• Reviewing CRISC domains and key knowledge areas
• Exam-taking strategies and best practices
• Mock exams and detailed question analysis
• Final review and Q&A session

Conclusion

• Summary of CRISC certification objectives
• Discussing the professional and organisational value of CRISC certification
• Next steps for sitting the CRISC exam and maintaining certification status

Assessment

• Quizzes following each domain to reinforce learning outcomes
• Practice exams simulating the CRISC certification exam environment
• Final assessment to evaluate readiness for the CRISC exam