CRISC Bootcamp (Certified In Risk and Information System Control)

This 4-day course will prepare for the CRISC® Certified In Risk and Information System Control exam, covering the entire Common Body of Knowledge (CBK) as defined by the ISACA® (Information Systems Audit and Control Association).

Overview:
This training provides a comprehensive review of information security concepts and industry best practices, covering the 4 key areas of the 7th edition of the CRISC CBK (Common Body of Knowledge).

This training course will help candidates review and refresh their IT risk management knowledge and help identify areas they need to study for the CRISC exam.

The CRISC certification is recognized worldwide.

Outline:
Governance
Organizational Structure, Strategy, Goals and Objectives
Business Process Review, Organization Assets
Enterprise Risk Management and Risk Management Frameworks
Three Lines of Defence
Risk Profile, Appetite, Tolerance and Capacity
IT Risk Assessment
Threat Modelling and Threat Landscape
Risk Assessment Concepts, Standards and Frameworks
Risk Scenario Development
Risk Analysis Methodologies, Business Impact Analysis
Inherent, Residual and Current Risk
Risk Response and Reporting
Risk and Control Ownership, Risk Treatment/Risk Response Options
Third-party Risk Management
Control Design, Implementation, Monitoring and Effectiveness
Risk and Control Monitoring and Reporting Techniques
Key Performance, Risk and Control Indicators
Information Technology and Security
Enterprise Architecture, Resiliency, IT Operations and Project Management
System Development and Data Life Cycle Management
Emerging Trends in Technology
Information Security Concepts, Frameworks and Standards
Data Privacy and Principles of Data Protection

Objectives:
Completion of this course will enable students to
Master the risk management approach according to the CRISC
Apply the best response strategies to the risks weighing on the information systems
Define information system controls
Use best risk and control monitoring practices
Preparing for the CRISC Certification Exam, eg by using multiple choices questions from previous CRISC sessions (or comparable exams).

Audience:
This course is aimed at students with (future) roles like:

Governance, information and cyber security consultants, CISOs
Risk and control professionals
IT and compliance professionals
Project managers, business analysts
Auditors requiring more IT risk management insight

Prerequisites:
Basic knowledge of Information Systems is recommended.

Minimum of two students are required to run this course.

Examination and Certification:
This course has been designed and is delivered by Nitroxis and their trainers.

Note: This course does not include the CRISC exam. This has to be taken at the dedicated test facilities as defined by ISACA. ISACA‘s certification requirements apply.