CRISC Prep Course

1. Introduction to the ISACA CRISC Exam

• Class Overview
• CRISC Domains
• Test Registration

2. Risk Identification

• Good Practices for Risk Management
• Components of Risk Management
• Methods for Risk Identification
• Risk Culture and Communication
• The Businesses IT Risk Structure
• Risk Principles and Concepts
• Vulnerabilities and Threats
• Assets
• Threats
• Vulnerabilities
• Vulnerability Assessment
• Pen Testing
• Probability/Likelihood
• IT Risk
• IT Risk Scenarios
• Ownership and Accountability
• Other Risk Concepts
• Risk Awareness

3. IT Risk Assessment

• Risk Assessment vs. Risk Identification
• Techniques for Risk Assessment
• Risk Scenarios
• Analyzing the Current State of Controls
• Risk and Control Analysis
• Risk Analysis Techniques
• Incident Response
• Business Risk
• Risk Associated with Enterprise Architecture
• Management of Data
• Emerging Technologies and Threats
• Industry Trends
• Third Party Management
• Project and Program Management
• SDLC
• Recovery and Business Continuity
• Risk Assessment Reports
• Ownership of Risk and Accountability
• Communication of Report Results

4. Risk Response

• Risk Response and Business Objectives Alignment
• Response Options
• Techniques for Analysis
• New Controls and Related Vulnerabilities
• A Risk Action Plan
• Techniques for BPR
• Design and Implementation of Controls
• Control Monitoring
• Inherent and Residual Risk
• Control Objectives Practices and Metrics
• Cryptography as a Control
• Control Design and Implementation
• Emerging Technologies and Controls
• Ownership of Controls
• Management Procedures and Documentation
• Response and Action Plan

5. Risk and Control Monitoring and Reporting

• Key Risk Indicators
• Risk Management Life Cycle
• Key Performance and Goal Indicators
• Data Collection and Extracting Techniques
• Changes in Risk Profile
• Monitoring Controls
• Control Assessment Types
• Control Assessment Results
• Risk Profile Changes

6. Test Review

• Key Risk Indicators
• Test Review
• Test Registration
• Test Preparation
• Certification Maintenance

Students will master the four CRISC domains:

• IT Risk Identification
• IT Risk Assessment
• Risk Response and Mitigation
• Risk Control, Monitoring, and Reporting

At least three years cumulative work experience performing tasks across at least three of the CRISC domains is recommended.

• IT Risk Management Professionals
• Control and Assurance Professionals
• CIOs
• CISOs