CRISC - Certified in Risk and Information Systems Control - 4 Days Training Course

Domain 1: Governance

• Comprehending governance principles and their significance
• Frameworks for organizational and risk governance
• Enterprise Risk Management (ERM) and Risk Management Frameworks (RMF)
• IT risk-related policies, standards, and business processes

Domain 2: IT Risk Assessment

• Recognizing IT risk events and scenarios
• Threat modelling and vulnerability evaluation
• Risk assessment methods and business impact analysis
• Management of inherent and residual risks

Domain 3: Risk Response and Reporting

• Formulating risk response strategies
• Defining risk and control accountability
• Managing third-party risks
• Risk reporting and communication protocols

Domain 4: Information Technology and Security

• IT and security frameworks and standards
• Design and implementation of information systems controls
• Ongoing control monitoring and upkeep
• Evolving trends and emerging technologies in IT risk and control

Exam Preparation

• Review of CRISC domains and knowledge areas
• Exam-taking techniques and strategic advice
• Mock exams and question paper analysis
• Final review and Q&A session

Conclusion

• Summary of CRISC certification objectives
• Discussion on the professional and organizational value of CRISC certification
• Next steps for sitting the CRISC exam and maintaining certification status

Assessment

• Post-domain quizzes to consolidate learning
• Mock exams to emulate the actual CRISC certification test
• Final evaluation to gauge readiness for the CRISC exam