MyGK
Support
USA USA - English
Checkout

Cart () Loading...

    • Quantity:
    • Delivery:
    • Dates:
    • Location:

    $

Subtotal

$

Checkout

or Continue Shopping

Talk to an expert
Course  
Talk to an expert

Global Knowledge is now part of Enduring Ventures. Read the press release →

CRISC Prep Course

New - Prepare for the ISACA CRISC certification exam.

Prepare the CRISC - Certified Risk and Information System Control certification
This CRISC training course, in association with ISACA, prepares IT professionals for real-world threats with relevant tools to assess, govern and mitigate risk, and is targeting certification preparation.
The CRISC - Certified Risk and Information System Control - certificate gives you international recognition (from ISACA) as a security professional. The CRISC extensive set of online practice questions (QAE) are included in the courseprice.
The CRISC designation will not only certify professionals who have knowledge and experience identifying and evaluating entity-specific risk, but also aid them in helping enterprises accomplish business objectives by designing, implementing, monitoring and maintaining risk-based, efficient and effective IS controls.

  • Continuing Professional Education (CPE): 31.
  • Practice questions (QAE = Questions, Answers and Explanations): 6 month access.
GK# 2089 Vendor# CRISC
Vendor Credits:
  • Global Knowledge Delivered Course
  • Training Exclusives
No matching courses available.
Start learning as soon as today! Click Add To Cart to continue shopping or Buy Now to check out immediately.
Access Period:
Scheduling a custom training event for your team is fast and easy! Click here to get started.
$
Your Selections:
Location:
Access Period:
No available dates
Add To Cart

BUY NOW

Request a quote

Is This The Right Course?

At least three years cumulative work experience performing tasks across at least three CRISC domains is recommended.

Who Should Attend?

CRISC is designed for IT professionals, risk professionals, business analysts, and project manager and/or compliance professionals and anyone who has job responsibilities in the following areas: Risk identification, assessment, evaluation, risk response, monitoring and IS control design/monitoring and implementation/maintenance, including:

  • Security Directors/Managers/Consultants.
  • Compliance/Risk/Privacy Directors and Managers.
  • IT Audit Directors/Managers/Consultants.
  • Compliance/Risk/Control Staff.

What You'll Learn

After this course participants should be able to:

  • Understand Master Governance Frameworks: Understand organizational structures, policies, and accountability principles required to govern enterprise IT risk.
  • Assess IT Risk: Identify threats, vulnerabilities, and impacts on business objectives to evaluate risk scenarios and assign accurate ratings.
  • Implement Risk Responses: Formulate and execute practical risk treatment plans (mitigate, transfer, avoid, or accept) and monitor their performance.
  • Optimize Security Controls: Design, implement, and maintain effective information systems controls to safeguard modern enterprise assets.
  • Align IT with Business Goals: Translate technical risk data into meaningful business metrics to help leadership make informed strategic decisions.

Course Outline

Domain 1: Governance

A. Organizational Governance

  • Strategy, Goals, and Objectives.
  • Organizational Structure, Roles, and Responsibilities.
  • Organizational Culture and Ethics.
  • Policies and Standards.
  • Business Processes and Resilience (e.g., DRP, BCP).
  • Organizational Asset Management.

B. Risk Governance

  • Enterprise Risk Management (ERM).
  • Lines of Defense.
  • Risk Profile.
  • Risk Appetite and Risk Tolerance.
  • Risk Frameworks, Legal, Regulatory, and Contractual Requirements.


Domain 2: Risk Assessment

A. Risk Identification

  • Threat Modeling and Threat Landscape.
  • Vulnerability Management.
  • Risk Scenario Development and Evaluation.

B. Risk Analysis

  • Risk Assessment Concepts and Standards.
  • Business Impact Analysis (BIA).
  • Risk Register.
  • Risk Analysis Methodologies.
  • Inherent and Residual Risk.


Domain 3: Risk Response and Reporting

A. Risk Response

  • Risk Response Options.
  • Risk and Control Ownership.
  • Vendor/Supply Chain Risk Management.
  • Issues, Findings, Exceptions, and Exemptions Management.

B. Control Design and Implementation

  • Control Frameworks, Types, and Standards.
  • Control Design, Selection, Implementation, and Analysis.
  • Control Testing Methodologies.

C. Risk Monitoring and Reporting

  • Risk Action Plans Data Collection, Aggregation, Analysis, and Validation.
  • Risk and Control Metrics (e.g., KRIs, KCIs, KPIs).
  • Risk and Control Monitoring Techniques.
  • Risk and Control Reporting Techniques (e.g., heatmaps, scorecards, dashboards).
  • Monitoring and Reporting of Emerging Risks.


Domain 4: Technology and Security

A. Technology Principles

  • Technology Roadmaps and Enterprise Architecture (EA).
  • Operations Management (e.g., change management, assets, DevOps, problems, incidents).
  • System Development Life Cycle (SDLC).
  • Data Lifecycle Management.
  • Portfolio and Project Management (e.g., Agile).
  • Technology Resilience and Disaster Response/Recovery.
  • Emerging Technologies.

B. Information Security Principles

  • Security Concepts, Frameworks, and Standards.
  • Security/Risk Awareness and Training.
  • Data Privacy and Data Protection Principles.
BUY NOW

Prerequisites

At least three years cumulative work experience performing tasks across at least three CRISC domains is recommended.

Related Certifications

The CRISC exam lasts 4 hours and consists of 150 multiple-choice questions in English.

Exam Domains:
Governance – 26%
IT Risk Assessment – 22%
Risk Response and Reporting – 32%
Information Technology and Security – 20%

Exam Voucher:
Please note that the exam voucher for the official CRISC exam is not included in the course price. However, the exam voucher can be purchased when attending the associated training.
The exam voucher is available only to Global Knowledge course attendees and cannot be purchased as a standalone product.

Certification Requirements:
To obtain the CRISC certification, candidates must:

  • Pass the official CRISC exam.
  • Have three (3) or more years of cumulative work experience performing the tasks of a CRISC professional across at least two (2) CRISC domains, with at least one year of experience in Domain 1 or Domain 2.

There are no substitutions or experience waivers.

Follow-On Courses

Management & Governance Paths

  • CISM (Certified Information Security Manager): Focuses on security program management, strategy, and incident management.

Audit & Compliance Paths

  • CISA (Certified Information Systems Auditor): Focuses on evaluating IT controls, compliance, and safeguarding information assets.
  • ISO 27001LI - ISO27001LA Lead Implementer / Auditor: Provides hands-on operational training for building and auditing information security management systems (ISMS).