SC240: ISACA™ CRISC Preparation

Agenda:

• Domain 1: Governance (26%)
  
  • Organizational Governance
    
    • Strategy, Goals, and Objectives
    • Organizational Structure, Roles, and Responsibilities
    • Organizational Culture and Ethics
    • Policies and Standards
    • Business Processes and Resilience
    • Organizational Asset Management
  • Risk Governance
    
    • Enterprise Risk Management
    • Lines of Defense
    • Risk Profile
    • Risk Appetite and Risk Tolerance
    • Risk Frameworks, Legal, Regulatory, and Contractual Requirements

• Domain 2: Risk Assessment (22%)
  
  • Risk Identification
    
    • Risk Events
    • Threat Modeling and Threat Landscape
    • Vulnerability Management
    • Risk Scenario Development and Evaluation
  • Risk Analysis
    
    • Risk Assessment Concepts and Standards
    • Business Impact Analysis (BIA)
    • Risk Register
    • Risk Analysis Methodologies
    • Inherent, Residual, and Current Risk

• Domain 3: Risk Response and Reporting (32%)
  
  • Risk Response
    • Risk Response Options
    • Risk and Control Ownership
    • Vendor/Supply Chain Risk Management
    • Issues, Findings, Exceptions, and Exemptions Management
  • Control Design and Implementation
    • Control Frameworks, Types, and Standards
    • Control Design, Selection, Implementation, and Analysis
    • Control Testing Methodologies
  • Risk Monitoring and Reporting
    
    • Risk Action Plans
    • Data Collection, Aggregation, Analysis, and Validation
    • Risk and Control Metrics
    • Risk and Control Monitoring and Reporting Technique
    • Monitoring and Reporting of Emerging Risks

• Domain 4: Technology and Security (20%)
  
  • Technology Principles
    
    • Technology Roadmaps and Enterprise Architecture (EA)
    • Operations Management
    • System Development Life Cycle (SDLC)
    • Data Lifecycle Management
    • Portfolio and Project Management
    • Technology Resilience and Disaster Response/Recovery
    • Emerging Technologies
  • Information Security Principles
    
    • Security Concepts, Frameworks, and Standards
    • Security/Risk Awareness and Training
    • Data Privacy and Data Protection Principles

Objectives:

Target audience:

The workshop is aimed at professionals seeking to advance their knowledge in IT Risk Management and Enterprise Risk Management, with at least 3 years of relevant professional experience in the fields of Risk Management and Internal Control within the IT environment.

Job titles include:

• IT Experts
• IT Auditors
• Internal Auditors and External Auditors
• Risk Managers and Consultants
• Security Administrators
• IT Security Analysts

Prerequisites:

To obtain CRISC certification, the following requirements must be met:

• Successful completion of the CRISC exam
• Adherence to the ISACA™ Code of Professional Ethics
• Proof of at least three years of professional experience in the fields of Risk Management and IT Control
• Proof of ongoing professional education (Continuing Professional Education (CPE) Policy)

Description:

Other Info: