CRISC - Solomon People Solutions

CRISC (Certified in Risk and Information Systems Control) Certification Training Course

The Certified in Risk and Information Systems Control (CRISC) training course provides participants with an in-depth awareness of diverse business risks, as well as the practical knowledge and skills necessary to implement effective IS controls within a company.

Overview

CRISC is the most updated and holistic test available for evaluating IT professionals and other industry and financial sector employees. The CRISC online course prepares IT professionals for the specific difficulties presented by information systems. CRISC (Certified in Risk and Information Systems Control) is an IT certification for enterprise risk management. The course helps them learn the skills and knowledge necessary to assess and manage enterprise IT risk, as well as build and maintain information systems controls.
CRISC certification is an acquired qualification that certifies your risk management knowledge and skills. Certified in Risk and Information Systems Control (CRISC) enables IT Professionals to effectively develop, implement, monitor, control, and maintain a variety of companies

CRISC is an acronym for Certified in Risk and Information Systems Control. CRISC is “the most up-to-date and rigorous evaluation available to evaluate the risk management expertise of IT experts and other personnel inside a company or financial institution.” If you’re a professional in the field of information technology, you’re aware of the importance of consistently enhancing your skill set. A multitude of certifications are available to help you improve your qualifications for a promotion or a better job.

CRISC certification is an acquired qualification that certifies your risk management knowledge and skills. CRISC-certified individuals assist organizations in comprehending business risk and have the technical knowledge to implement the most effective information security policies and controls.

Target Audience

Target Audience

Individuals who can take up Certified in Risk and Information Systems Control online training include, but are not limited to:

  • Chief Information Officers
  • Business Analysts
  • Information Security Specialists
  • Project Managers
  • Risk Management Professionals
  • Quality Assurance Professionals
  • Compliance Professionals
  • Control Professionals
  • IT Professionals
  • Aspiring Risk and Information Control Specialists
  • Professionals who are looking to understand Information Control and Risk Management concepts in an organization
  • Professionals who are looking to sit for ISACAs CRISC certification exam

Pre-Requisites

Pre-Requisites

To become CRISC certified, applicants are required to meet the following requirements:

  • Individuals who are interested in risk and information control are eligible to take the CRISC test, as are all other individuals.
  • Adhere to the Code of Professional Ethics: To guide CRISC approved conduct holders and individual members.
  • Program of Continuing Professional Education (CPE): The aims of the ongoing education programme are to maintain and distinguish the competency of individuals.
  • Demonstrate the Minimum Required Work Experience: A minimum of three years of aggregate work experience is required for certification in the execution of CRISC professional duties.

Exam Info

Exam Information 

Exam Name Certified in Risk and Information Systems Control (CRISC)
Exam Type Multiple-choice Questions
Exam Cost USD 575 for ISACA members and USD 760 for non-members
Total Questions 150 Questions
Exam Duration 240 Minutes
Passing Score 450
Languages English, Chinese Simplified, and Spanish
Exam Type Closed Book
CRISC Training Duration:  32 Hours
Course Syllabus

Domain 1: Governance 26%

A Organizational Governance

  • Organizational Strategy, Goals, and Objectives
  • Organizational Structure, Roles, and Responsibilities
  • Organizational Culture
  • Policies and Standards
  • Business Processes
  • Organizational Assets

B Risk Governance

  • Enterprise Risk Management and Risk Management Framework
  • Three Lines of Defense
  • Risk Profile
  • Risk Appetite and Risk Tolerance
  • Legal, Regulatory, and Contractual Requirements
  • Professional Ethics of Risk Management

Domain 2: IT Risk Assessment 20%

A IT Risk Identification

  • Risk Events (e.g., contributing conditions, loss result)
  • Threat Modelling and Threat Landscape
  • Vulnerability and Control Deficiency Analysis (e.g., root cause analysis)
  • Risk Scenario Development

B IT Risk Analysis and Evaluation

  • Risk Assessment Concepts, Standards, and Frameworks
  • Risk Register
  • Risk Analysis Methodologies
  • Business Impact Analysis
  • Inherent and Residual Risk

Domain 3: Risk Response and Reporting 32%

A Risk Response

  • Risk Treatment / Risk Response Options
  • Risk and Control Ownership
  • Third-Party Risk Management
  • Issue, Finding, and Exception Management
  • Management of Emerging Risk

B Control Design and Implementation

  • Control Types, Standards, and Frameworks
  • Control Design, Selection, and Analysis
  • Control Implementation
  • Control Testing and Effectiveness Evaluation

C Risk Monitoring and Reporting

  • Risk Treatment Plans
  • Data Collection, Aggregation, Analysis, and Validation
  • Risk and Control Monitoring Techniques
  • Risk and Control Reporting Techniques (heatmap, scorecards, dashboards)
  • Key Performance Indicators
  • Key Risk Indicators (KRIs)
  • Key Control Indicators (KCIs)

Domain 4: Information Technology and Security 22%

A Information Technology Principles

  • Enterprise Architecture
  • IT Operations Management (e.g., change management, IT assets, problems, incidents)
  • Project Management
  • Disaster Recovery Management (DRM)
  • Data Lifecycle Management
  • System Development Life Cycle (SDLC)
  • Emerging Technologies

B Information Security Principles

  • Information Security Concepts, Frameworks, and Standards
  • Information Security Awareness Training
  • Business Continuity Management
  • Data Privacy and Data Protection Principles

CRISC Training Benefits

  • Denotes a prestigious, lifelong symbol of knowledge and expertise as a risk professional
  • Increases your value to your organization as it seeks to manage IT risk
  • Gives you a competitive advantage over peers when seeking job growth
  • Gives you access to ISACA’s global community of knowledge and the most up-to-date thinking on IT risk management
  • Helps you achieve a high professional standard through ISACA’s requirements for continuing education and ethical conduct

Schedule & Fee

Up-coming Schedule: 

Please contact us to know about the upcoming schedule.