CRISC Certified in Risk and Information Systems Control

Domain 1: Governance
Module 1: Organizational Governance

• Organizational Strategy, Goals, and Objectives
• Organizational Structure, Roles, and Responsibilities
• Organizational Culture
• Policies and Standards
• Business Process Review
• Organizational Assets

Module 2: Risk Governance

• Enterprise Risk Management and Risk Management Frameworks
• Three Lines of Defense
• Risk Profile
• Risk Appetite, Tolerance and Capacity
• Legal, Regulatory and Contractual Requirements
• Professional Ethics of Risk Management

Domain 2: IT Risk Assessment
Module 3: IT Risk Identification

• Risk Events
• Threat Modeling and Threat Landscape
• Vulnerability and Control Deficiency Analysis
• Risk Scenario Development

Module 4: IT Risk Analysis, Evaluation and Assessment

• Risk Assessment Concepts, Standards and Frameworks
• Risk Register
• Risk Analysis Methodologies
• Business Impact Analysis
• Inherent, Residual and Current Risk

Domain 3: Risk Response and Reporting
Module 5: Risk Response

• Risk and Control Ownership
• Risk Treatment/Risk Response Options
• Third Party Risk Management
• Issue, Finding and Expectation Management
• Management of Emerging Risk

Module 6: Control, Design and Implementation

• Control Types, Standards and Frameworks
• Control Design, Selection and Analysis
• Control Implementation
• Control Testing and Effectiveness Evaluation

Module 7: Risk Monitoring and Reporting

• Risk Treatment Plans
• Data Collection, Aggregation, Analysis and Validation
• Risk and Control Monitoring Techniques
• Key Performance Indicators
• Key Risk Indicators
• Key Control Indicators

Domain 4: Information Technology and Security
Module 8: Information Technology Principles

• Enterprise Architecture
• IT Operations Management
• Project Management
• Enterprise Resiliency
• Data Life Cycle Management
• System Development Life Cycle
• Emerging Trends in Technology

Module 9: Information Security Principles

• Information Security Concepts, Frameworks and Standards
• Information Security Awareness Training
• Data Privacy and Principles of Data Protection

By the end of this course, participants will be able to:

• Identify & Assess IT Risks – Recognize, analyze, and evaluate IT risks impacting business operations.
• Develop Risk Response Strategies – Implement effective risk mitigation plans to protect organizational assets.
• Ensure Governance & Compliance – Align IT risk management with regulatory and business policies.
• Enhance Business Resilience – Strengthen continuity planning to minimize disruptions from IT threats.
• Implement Industry Best Practices – Apply frameworks like COBIT, NIST, and ISO 27001 for effective risk control.
• Support Risk-Based Decision-Making – Provide leadership with data-driven insights for balancing risk and business objectives.

Master IT risk management—Get CRISC certified today!

The CRISC certification is ideal for professionals responsible for IT risk management, security, and compliance. This course is designed for:

• IT Risk Professionals – Risk analysts, IT auditors, and governance specialists managing enterprise risk.
• Cybersecurity & Compliance Experts – Security consultants, compliance officers, and governance professionals ensuring regulatory adherence.
• IT & Security Managers – Professionals overseeing risk management strategies and business continuity.
• Business & Risk Consultants – Advisors helping organizations strengthen their risk frameworks.
• CISOs & IT Leaders – Executives responsible for aligning IT risk with business strategy.

Advance your career in IT risk—Get CRISC certified today!