SC240: ISACA™ CRISC Preparation

Agenda:

• Domain 1: Governance (26%)
  
  • Organizational Governance
    
    • Strategy, Goals, and Objectives
    • Organizational Structure, Roles, and Responsibilities
    • Organizational Culture and Ethics
    • Policies and Standards
    • Business Processes and Resilience
    • Organizational Asset Management
  • Risk Governance
    
    • Enterprise Risk Management
    • Lines of Defense
    • Risk Profile
    • Risk Appetite and Risk Tolerance
    • Risk Frameworks, Legal, Regulatory, and Contractual Requirements

• Domain 2: Risk Assessment (22%)
  
  • Risk Identification
    
    • Risk Events
    • Threat Modeling and Threat Landscape
    • Vulnerability Management
    • Risk Scenario Development and Evaluation
  • Risk Analysis
    
    • Risk Assessment Concepts and Standards
    • Business Impact Analysis (BIA)
    • Risk Register
    • Risk Analysis Methodologies
    • Inherent, Residual, and Current Risk

• Domain 3: Risk Response and Reporting (32%)
  
  • Risk Response
    • Risk Response Options
    • Risk and Control Ownership
    • Vendor/Supply Chain Risk Management
    • Issues, Findings, Exceptions, and Exemptions Management
  • Control Design and Implementation
    • Control Frameworks, Types, and Standards
    • Control Design, Selection, Implementation, and Analysis
    • Control Testing Methodologies
  • Risk Monitoring and Reporting
    
    • Risk Action Plans
    • Data Collection, Aggregation, Analysis, and Validation
    • Risk and Control Metrics
    • Risk and Control Monitoring and Reporting Technique
    • Monitoring and Reporting of Emerging Risks

• Domain 4: Technology and Security (20%)
  
  • Technology Principles
    
    • Technology Roadmaps and Enterprise Architecture (EA)
    • Operations Management
    • System Development Life Cycle (SDLC)
    • Data Lifecycle Management
    • Portfolio and Project Management
    • Technology Resilience and Disaster Response/Recovery
    • Emerging Technologies
  • Information Security Principles
    
    • Security Concepts, Frameworks, and Standards
    • Security/Risk Awareness and Training
    • Data Privacy and Data Protection Principles

Objectives:

Target audience:

The workshop is aimed at professionals seeking to advance their knowledge in IT Risk Management and Enterprise Risk Management, with at least 3 years of relevant professional experience in the fields of Risk Management and Internal Control within the IT environment.

Job titles include:

• IT Experts
• IT Auditors
• Internal Auditors and External Auditors
• Risk Managers and Consultants
• Security Administrators
• IT Security Analysts

Prerequisites:

To obtain CRISC certification, the following requirements must be met:

• Successful completion of the CRISC exam
• Adherence to the ISACA™ Code of Professional Ethics
• Proof of at least three years of professional experience in the fields of Risk Management and IT Control
• Proof of ongoing professional education (Continuing Professional Education (CPE) Policy)

Description:

Other Info:

The SC240 ISACA™ CRISC Preparation workshop provides intensive preparation for the ISACA™ examination to obtain the CRISC certification. The paid examination consists of 150 questions, which must be completed within four hours.
The examination is not included in the course and is conducted on a separate date. It is administered exclusively via PSI, either as an online examination or at an authorized PSI test center. The examination can be purchased through qSkills™.

ISACA™ certification exam – retake policy

The following regulations for retake exams apply to ISACA™ certification exams:

Candidates have a total of four attempts to pass the respective certification exam within a rolling period of twelve months. If the exam is not passed on the first attempt, a maximum of three further attempts are available within twelve months from the date of the first exam attempt.

The following waiting periods apply for retake exams:

• Retake 1 (2nd exam attempt): at the earliest 30 days after the first exam attempt

• Retake 2 (3rd exam attempt): at the earliest 90 days after the second exam attempt

• Retake 3 (4th exam attempt): at the earliest 90 days after the third exam attempt

For each individual exam attempt, the respectively applicable exam fee must be paid in full.

After passing the exam, the same certification exam may not be taken again within the five-year application period.

Holders of a valid ISACA™ certification may not take the corresponding certification exam again during the validity of their certification.

The current exam and retake policies of ISACA™ apply.

Course language: German or English
Course materials: English
Examination language: English

The official ISACA™ course materials are provided in digital format. Please bring either a laptop or a tablet to the training.

Internet access for your device is, of course, available free of charge at our training center.