Certified in Risk and Information Systems Control (CRISC) – ISACA
The CRISC certification course focuses on the principles and practices of risk management and information systems control.
- Course fee
- Contact us
- Duration
- 5 days
- Group rate
- Ask an advisor
Course overview
The CRISC certification course focuses on the principles and practices of risk management and information systems control. It covers the methodologies for identifying, assessing, and managing IT and business risks. The course prepares participants for the CRISC certification exam and provides them with the skills needed to design, implement, and monitor risk management and control systems effectively.
Training methodology
Lectures and Presentations: Detailed explanation of CRISC domains, principles, and practices.
Hands-On Labs: Practical exercises related to risk management and control.
Case Studies: Analysis of real-world scenarios and application of CRISC methodologies.
Group Discussions: Interactive sessions to discuss risk management challenges and solutions.
Quizzes and Practice Exams: Assessments to gauge understanding and readiness for the CRISC certification exam.
Target competencies
- Risk identification and assessment
- Risk response and mitigation
- Control design and implementation
- Risk monitoring and reporting
Course objectives
By the end of the course, participants will be able to:
- To provide comprehensive knowledge of risk management and information systems control.
- To develop skills for identifying, assessing, and managing IT and business risks.
- To prepare participants for the CRISC certification exam.
- To equip participants with techniques for implementing and monitoring risk management and control systems.
Course outline
- Overview of CRISC and Its Importance
- Key Concepts and Terminology
- CRISC Certification and Its Value
- Frameworks and Standards for Risk Management
- Risk Identification: Identifying and Categorizing Risks
- Risk Identification Techniques
- Sources of Risk (Internal and External)
- Risk Assessment: Assessing Risk Impact and Likelihood
- Risk Assessment Methods (Qualitative and Quantitative)
- Risk Assessment Tools and Techniques
- Risk Register: Creating and Maintaining a Risk Register
- Risk Response Strategies: Developing Risk Response Plans
- Risk Avoidance, Reduction, Sharing, and Acceptance
- Selecting Appropriate Risk Responses
- Control Design: Designing Effective Controls
- Control Types and Objectives
- Control Design Considerations
- Control Implementation: Implementing and Managing Controls
- Control Implementation Processes
- Monitoring and Testing Controls
- Control Monitoring: Techniques for Monitoring Controls
- Continuous Monitoring and Evaluation
- Performance Metrics and KPIs
- Reporting: Reporting on Risk and Control
- Risk and Control Reporting Requirements
- Communicating Risk and Control Information to Stakeholders
- Incident Management: Handling and Reporting Security Incidents
- Frameworks: Integrating CRISC with Other Risk Management Frameworks
- ISO/IEC 27001
- COSO ERM
- Standards: Aligning with Industry Standards and Best Practices
- Industry-Specific Standards (e.g., SOX, GDPR)
- Case Studies: Real-World Examples of Risk Management and Control
- Analysis of Risk Management Practices
- Lessons Learned and Best Practices
- Hands-On Labs: Practical Exercises
Morning and evening classes are available. CompuBase Training Center, Abu Dhabi.
