SlideShare une entreprise Scribd logo
1  sur  13
Télécharger pour lire hors ligne
CRISC Certification
Training - Brochure
Why take up
CRISC CERTIFICATION
TRAINING?
The Certified in Risk and Information Systems Control (CRISC) training course provides participants with
an in-depth awareness of diverse business risks, as well as the practical knowledge and skills necessary
to implement effective IS controls within a company.
CRISC is the most updated and holistic test available for evaluating IT professionals and other industry
and financial sector employees. The CRISC online course prepares IT professionals for the specific
difficulties presented by information systems. CRISC (Certified in Risk and Information Systems Control)
is an IT certification for enterprise risk management. The average salary of a CRISC certified professional
is in the range of USD 90,000 to USD 192,000 per annum in the US.
Who can take up
CRISC TRAINING?
Job roles that can find PMP training beneficial are:
IT Professionals
Project Managers
Business Analysts
CEOs
CFOs
Chief Audit Executives
CIOs/CISOs
Audit Partners
Security Managers
Risk Officers
Compliance Professionals
Consultants
• Anybody who wants to gain knowledge of CRISC to achieve risk
management proficiency
• Professionals who are looking sit for the CRISC certification exam
Why Take up CRISC
TRAINING FROM
SPOCLEARN?
4-day interactive instructor-led CRISC Training
z
100% Money-Back Guarantee
z
Expert CRISC trainers across the globe
z
Accredited CRISC course material prepared by SMEs
z
Case Studies with real-world examples
z
After training coaching for real-world application
z
Course Completion Certificate provided after the training
z
CRISC CERTIFICATION
ELIGIBILITY CRITERIA
• There are no prerequisites required to take up the CRISC training. Anybody who wants to understand
about risk management and information security best practices can be part of this CRISC training.
• However, if you are looking to earn the CRISC credential from ISACA, then you have to:
• Pass the CRISC Exam within the last 5 years.
• Have the relevant full-time work experience in the CRISC exam content outline.
CRISC CERTIFICATION
EXAM FORMAT
Exam Type
Multiple Choice
No. of Questions
150 questions
Passing Score
450 out of 800
Exam duration
240 minutes
(Four hours)
(Above 57%)
Type: Closed Book Exam
Language: English 01 02
03 04
Certified in Risk and Information
Systems Control (CRISC)
Training Agenda
GOVERNANCE (26%)
1
A—ORGANIZATIONAL GOVERNANCE
v Organizational Strategy, Goals, and Objectives
v Organizational Structure, Roles and Responsibilities
v Organizational Culture
v Policies and Standards
v Business Processes
v Organizational Assets
B—RISK GOVERNANCE
v Enterprise Risk Management and Risk Management Framework
v Three Lines of Defense
v Risk Profile
v Risk Appetite and Risk Tolerance
v Legal, Regulatory and Contractual Requirements
v Professional Ethics of Risk Management
IT RISK ASSESSMENT (20%)
2
A—IT RISK IDENTIFICATION
v Risk Events (e.g., contributing conditions, loss result)
v Threat Modelling and Threat Landscape
v Vulnerability and Control Deficiency Analysis (e.g., root cause analysis)
v Risk Scenario Development
B—IT RISK ANALYSIS AND EVALUATION
v Risk Assessment Concepts, Standards and Frameworks
v Risk Register
v Risk Analysis Methodologies
v Business Impact Analysis
v Inherent and Residual Risk
RISK RESPONSE AND MITIGATION (32%)
3
A—RISK RESPONSE
v Risk Treatment / Risk Response Options
v Risk and Control Ownership
v Third-Party Risk Management
v Issue, Finding and Exception Management
v Management of Emerging Risk
B—CONTROL DESIGN AND IMPLEMENTATION
v Control Types, Standards and Frameworks
v Control Design, Selection and Analysis
v Control Implementation
v Control Testing and Effectiveness Evaluation
C—RISK MONITORING AND REPORTING
v Risk Treatment Plans
v Data Collection, Aggregation, Analysis and Validation
v Risk and Control Monitoring Techniques
v Risk and Control Reporting Techniques (heatmap,
scorecards, dashboards)
v Key Performance Indicators
v Key Risk Indicators (KRIs)
v Key Control Indicators (KCIs)
INFORMATION TECHNOLOGY AND SECURITY (22%)
4
A—INFORMATION TECHNOLOGY PRINCIPLES
v Enterprise Architecture
v IT Operations Management (e.g., change management, IT assets, problems, incidents)
v Project Management
v Disaster Recovery Management (DRM)
v Data Lifecycle Management
v System Development Life Cycle (SDLC)
v Emerging Technologies
B—INFORMATION SECURITY PRINCIPLES
v Information Security Concepts, Frameworks and Standards
v Information Security Awareness Training
v Business Continuity Management
v Data Privacy and Data Protection Principles
LEARNING ROADMAP FOR YOU
Understand the learning
objectives that fits your
learning need
Contact our coach and
consultants and
understand in depth
Block your seat
Relate to how it
can help you
Talk to the trainer for
more clarity
Continuously learn and
apply the learning
1 3 5
2 4 6
Connect with us now!
Talk to our consultant
USA: +1 (832) 924 0564
IND: +91 83417-05065
UK: +44 807 164 0572
You can also email us at
info@spoclearn.com
support@spoclearn.com

Contenu connexe

Similaire à CRISC Certification Training Brochure.pdf

From Cave Man to Business Man, the Evolution of the CISO to CIRO
From Cave Man to Business Man, the Evolution of the CISO to CIROFrom Cave Man to Business Man, the Evolution of the CISO to CIRO
From Cave Man to Business Man, the Evolution of the CISO to CIROPriyanka Aash
 
Alexander Knorr Transcript
Alexander Knorr TranscriptAlexander Knorr Transcript
Alexander Knorr TranscriptAlexander Knorr
 
CISM Course Description CISM_Training_v2_Course_content.pdf
CISM Course Description CISM_Training_v2_Course_content.pdfCISM Course Description CISM_Training_v2_Course_content.pdf
CISM Course Description CISM_Training_v2_Course_content.pdfInfosec train
 
CISM Certification Training Course Content
CISM Certification Training Course ContentCISM Certification Training Course Content
CISM Certification Training Course Contentpriyanshamadhwal2
 
Isaca career paths - the highest paying certifications in the industry
Isaca career paths - the highest paying certifications in the industryIsaca career paths - the highest paying certifications in the industry
Isaca career paths - the highest paying certifications in the industryInfosec
 
What Can CRISC Certificate Holders Do?
What Can CRISC Certificate Holders Do?What Can CRISC Certificate Holders Do?
What Can CRISC Certificate Holders Do?InfoSec4TC
 
CERTIFIED INFORMATION TECHNOLOGY MANAGER
CERTIFIED INFORMATION TECHNOLOGY MANAGERCERTIFIED INFORMATION TECHNOLOGY MANAGER
CERTIFIED INFORMATION TECHNOLOGY MANAGERDee Smith & Associates
 
Cissp exam outline 121417- final (2)
Cissp exam outline 121417- final (2)Cissp exam outline 121417- final (2)
Cissp exam outline 121417- final (2)Joshua Fonseca
 
Know about cisa certification
Know about cisa certificationKnow about cisa certification
Know about cisa certificationJasonRoy50
 
CISSO Certification | CISSO Training | CISSO
CISSO Certification | CISSO Training | CISSOCISSO Certification | CISSO Training | CISSO
CISSO Certification | CISSO Training | CISSOSagarNegi10
 
Emerging Trends in Information Privacy and Security
Emerging Trends in Information Privacy and SecurityEmerging Trends in Information Privacy and Security
Emerging Trends in Information Privacy and SecurityJessica Santamaria
 
Emerging Trends in Information Privacy and Security
Emerging Trends in Information Privacy and SecurityEmerging Trends in Information Privacy and Security
Emerging Trends in Information Privacy and SecurityJessica Santamaria
 
A Career in Cybersecurity
A Career in CybersecurityA Career in Cybersecurity
A Career in Cybersecuritylfh663
 
538522937-Cisa-easdasdsadsadasdBook-New-1-188.pptx
538522937-Cisa-easdasdsadsadasdBook-New-1-188.pptx538522937-Cisa-easdasdsadsadasdBook-New-1-188.pptx
538522937-Cisa-easdasdsadsadasdBook-New-1-188.pptxssuserde23af
 

Similaire à CRISC Certification Training Brochure.pdf (20)

From Cave Man to Business Man, the Evolution of the CISO to CIRO
From Cave Man to Business Man, the Evolution of the CISO to CIROFrom Cave Man to Business Man, the Evolution of the CISO to CIRO
From Cave Man to Business Man, the Evolution of the CISO to CIRO
 
Risk Technology Strategy, Selection and Implementation
Risk Technology Strategy, Selection and ImplementationRisk Technology Strategy, Selection and Implementation
Risk Technology Strategy, Selection and Implementation
 
CRISC sertifikacija
CRISC sertifikacijaCRISC sertifikacija
CRISC sertifikacija
 
ISACA certification programme 2010
ISACA certification programme 2010ISACA certification programme 2010
ISACA certification programme 2010
 
Alexander Knorr Transcript
Alexander Knorr TranscriptAlexander Knorr Transcript
Alexander Knorr Transcript
 
CISM Course Description CISM_Training_v2_Course_content.pdf
CISM Course Description CISM_Training_v2_Course_content.pdfCISM Course Description CISM_Training_v2_Course_content.pdf
CISM Course Description CISM_Training_v2_Course_content.pdf
 
CISM Certification Training Course Content
CISM Certification Training Course ContentCISM Certification Training Course Content
CISM Certification Training Course Content
 
Isaca career paths - the highest paying certifications in the industry
Isaca career paths - the highest paying certifications in the industryIsaca career paths - the highest paying certifications in the industry
Isaca career paths - the highest paying certifications in the industry
 
What Can CRISC Certificate Holders Do?
What Can CRISC Certificate Holders Do?What Can CRISC Certificate Holders Do?
What Can CRISC Certificate Holders Do?
 
CERTIFIED INFORMATION TECHNOLOGY MANAGER
CERTIFIED INFORMATION TECHNOLOGY MANAGERCERTIFIED INFORMATION TECHNOLOGY MANAGER
CERTIFIED INFORMATION TECHNOLOGY MANAGER
 
Cissp exam outline 121417- final (2)
Cissp exam outline 121417- final (2)Cissp exam outline 121417- final (2)
Cissp exam outline 121417- final (2)
 
Value of IT Certifications (BDPA Cincinnati)
Value of IT Certifications (BDPA Cincinnati)Value of IT Certifications (BDPA Cincinnati)
Value of IT Certifications (BDPA Cincinnati)
 
Risk Product.pptx
Risk Product.pptxRisk Product.pptx
Risk Product.pptx
 
Know about cisa certification
Know about cisa certificationKnow about cisa certification
Know about cisa certification
 
CISM.pdf
CISM.pdfCISM.pdf
CISM.pdf
 
CISSO Certification | CISSO Training | CISSO
CISSO Certification | CISSO Training | CISSOCISSO Certification | CISSO Training | CISSO
CISSO Certification | CISSO Training | CISSO
 
Emerging Trends in Information Privacy and Security
Emerging Trends in Information Privacy and SecurityEmerging Trends in Information Privacy and Security
Emerging Trends in Information Privacy and Security
 
Emerging Trends in Information Privacy and Security
Emerging Trends in Information Privacy and SecurityEmerging Trends in Information Privacy and Security
Emerging Trends in Information Privacy and Security
 
A Career in Cybersecurity
A Career in CybersecurityA Career in Cybersecurity
A Career in Cybersecurity
 
538522937-Cisa-easdasdsadsadasdBook-New-1-188.pptx
538522937-Cisa-easdasdsadsadasdBook-New-1-188.pptx538522937-Cisa-easdasdsadsadasdBook-New-1-188.pptx
538522937-Cisa-easdasdsadsadasdBook-New-1-188.pptx
 

Dernier

AIM of Education-Teachers Training-2024.ppt
AIM of Education-Teachers Training-2024.pptAIM of Education-Teachers Training-2024.ppt
AIM of Education-Teachers Training-2024.pptNishitharanjan Rout
 
Stl Algorithms in C++ jjjjjjjjjjjjjjjjjj
Stl Algorithms in C++ jjjjjjjjjjjjjjjjjjStl Algorithms in C++ jjjjjjjjjjjjjjjjjj
Stl Algorithms in C++ jjjjjjjjjjjjjjjjjjMohammed Sikander
 
Sternal Fractures & Dislocations - EMGuidewire Radiology Reading Room
Sternal Fractures & Dislocations - EMGuidewire Radiology Reading RoomSternal Fractures & Dislocations - EMGuidewire Radiology Reading Room
Sternal Fractures & Dislocations - EMGuidewire Radiology Reading RoomSean M. Fox
 
What is 3 Way Matching Process in Odoo 17.pptx
What is 3 Way Matching Process in Odoo 17.pptxWhat is 3 Way Matching Process in Odoo 17.pptx
What is 3 Way Matching Process in Odoo 17.pptxCeline George
 
Trauma-Informed Leadership - Five Practical Principles
Trauma-Informed Leadership - Five Practical PrinciplesTrauma-Informed Leadership - Five Practical Principles
Trauma-Informed Leadership - Five Practical PrinciplesPooky Knightsmith
 
UChicago CMSC 23320 - The Best Commit Messages of 2024
UChicago CMSC 23320 - The Best Commit Messages of 2024UChicago CMSC 23320 - The Best Commit Messages of 2024
UChicago CMSC 23320 - The Best Commit Messages of 2024Borja Sotomayor
 
Details on CBSE Compartment Exam.pptx1111
Details on CBSE Compartment Exam.pptx1111Details on CBSE Compartment Exam.pptx1111
Details on CBSE Compartment Exam.pptx1111GangaMaiya1
 
How to Manage Website in Odoo 17 Studio App.pptx
How to Manage Website in Odoo 17 Studio App.pptxHow to Manage Website in Odoo 17 Studio App.pptx
How to Manage Website in Odoo 17 Studio App.pptxCeline George
 
Model Attribute _rec_name in the Odoo 17
Model Attribute _rec_name in the Odoo 17Model Attribute _rec_name in the Odoo 17
Model Attribute _rec_name in the Odoo 17Celine George
 
Major project report on Tata Motors and its marketing strategies
Major project report on Tata Motors and its marketing strategiesMajor project report on Tata Motors and its marketing strategies
Major project report on Tata Motors and its marketing strategiesAmanpreetKaur157993
 
80 ĐỀ THI THỬ TUYỂN SINH TIẾNG ANH VÀO 10 SỞ GD – ĐT THÀNH PHỐ HỒ CHÍ MINH NĂ...
80 ĐỀ THI THỬ TUYỂN SINH TIẾNG ANH VÀO 10 SỞ GD – ĐT THÀNH PHỐ HỒ CHÍ MINH NĂ...80 ĐỀ THI THỬ TUYỂN SINH TIẾNG ANH VÀO 10 SỞ GD – ĐT THÀNH PHỐ HỒ CHÍ MINH NĂ...
80 ĐỀ THI THỬ TUYỂN SINH TIẾNG ANH VÀO 10 SỞ GD – ĐT THÀNH PHỐ HỒ CHÍ MINH NĂ...Nguyen Thanh Tu Collection
 
OSCM Unit 2_Operations Processes & Systems
OSCM Unit 2_Operations Processes & SystemsOSCM Unit 2_Operations Processes & Systems
OSCM Unit 2_Operations Processes & SystemsSandeep D Chaudhary
 
diagnosting testing bsc 2nd sem.pptx....
diagnosting testing bsc 2nd sem.pptx....diagnosting testing bsc 2nd sem.pptx....
diagnosting testing bsc 2nd sem.pptx....Ritu480198
 
How to Send Pro Forma Invoice to Your Customers in Odoo 17
How to Send Pro Forma Invoice to Your Customers in Odoo 17How to Send Pro Forma Invoice to Your Customers in Odoo 17
How to Send Pro Forma Invoice to Your Customers in Odoo 17Celine George
 
PSYPACT- Practicing Over State Lines May 2024.pptx
PSYPACT- Practicing Over State Lines May 2024.pptxPSYPACT- Practicing Over State Lines May 2024.pptx
PSYPACT- Practicing Over State Lines May 2024.pptxMarlene Maheu
 
8 Tips for Effective Working Capital Management
8 Tips for Effective Working Capital Management8 Tips for Effective Working Capital Management
8 Tips for Effective Working Capital ManagementMBA Assignment Experts
 
TỔNG HỢP HƠN 100 ĐỀ THI THỬ TỐT NGHIỆP THPT TOÁN 2024 - TỪ CÁC TRƯỜNG, TRƯỜNG...
TỔNG HỢP HƠN 100 ĐỀ THI THỬ TỐT NGHIỆP THPT TOÁN 2024 - TỪ CÁC TRƯỜNG, TRƯỜNG...TỔNG HỢP HƠN 100 ĐỀ THI THỬ TỐT NGHIỆP THPT TOÁN 2024 - TỪ CÁC TRƯỜNG, TRƯỜNG...
TỔNG HỢP HƠN 100 ĐỀ THI THỬ TỐT NGHIỆP THPT TOÁN 2024 - TỪ CÁC TRƯỜNG, TRƯỜNG...Nguyen Thanh Tu Collection
 
DEMONSTRATION LESSON IN ENGLISH 4 MATATAG CURRICULUM
DEMONSTRATION LESSON IN ENGLISH 4 MATATAG CURRICULUMDEMONSTRATION LESSON IN ENGLISH 4 MATATAG CURRICULUM
DEMONSTRATION LESSON IN ENGLISH 4 MATATAG CURRICULUMELOISARIVERA8
 

Dernier (20)

AIM of Education-Teachers Training-2024.ppt
AIM of Education-Teachers Training-2024.pptAIM of Education-Teachers Training-2024.ppt
AIM of Education-Teachers Training-2024.ppt
 
Stl Algorithms in C++ jjjjjjjjjjjjjjjjjj
Stl Algorithms in C++ jjjjjjjjjjjjjjjjjjStl Algorithms in C++ jjjjjjjjjjjjjjjjjj
Stl Algorithms in C++ jjjjjjjjjjjjjjjjjj
 
Sternal Fractures & Dislocations - EMGuidewire Radiology Reading Room
Sternal Fractures & Dislocations - EMGuidewire Radiology Reading RoomSternal Fractures & Dislocations - EMGuidewire Radiology Reading Room
Sternal Fractures & Dislocations - EMGuidewire Radiology Reading Room
 
What is 3 Way Matching Process in Odoo 17.pptx
What is 3 Way Matching Process in Odoo 17.pptxWhat is 3 Way Matching Process in Odoo 17.pptx
What is 3 Way Matching Process in Odoo 17.pptx
 
Trauma-Informed Leadership - Five Practical Principles
Trauma-Informed Leadership - Five Practical PrinciplesTrauma-Informed Leadership - Five Practical Principles
Trauma-Informed Leadership - Five Practical Principles
 
UChicago CMSC 23320 - The Best Commit Messages of 2024
UChicago CMSC 23320 - The Best Commit Messages of 2024UChicago CMSC 23320 - The Best Commit Messages of 2024
UChicago CMSC 23320 - The Best Commit Messages of 2024
 
Details on CBSE Compartment Exam.pptx1111
Details on CBSE Compartment Exam.pptx1111Details on CBSE Compartment Exam.pptx1111
Details on CBSE Compartment Exam.pptx1111
 
How to Manage Website in Odoo 17 Studio App.pptx
How to Manage Website in Odoo 17 Studio App.pptxHow to Manage Website in Odoo 17 Studio App.pptx
How to Manage Website in Odoo 17 Studio App.pptx
 
Model Attribute _rec_name in the Odoo 17
Model Attribute _rec_name in the Odoo 17Model Attribute _rec_name in the Odoo 17
Model Attribute _rec_name in the Odoo 17
 
Major project report on Tata Motors and its marketing strategies
Major project report on Tata Motors and its marketing strategiesMajor project report on Tata Motors and its marketing strategies
Major project report on Tata Motors and its marketing strategies
 
80 ĐỀ THI THỬ TUYỂN SINH TIẾNG ANH VÀO 10 SỞ GD – ĐT THÀNH PHỐ HỒ CHÍ MINH NĂ...
80 ĐỀ THI THỬ TUYỂN SINH TIẾNG ANH VÀO 10 SỞ GD – ĐT THÀNH PHỐ HỒ CHÍ MINH NĂ...80 ĐỀ THI THỬ TUYỂN SINH TIẾNG ANH VÀO 10 SỞ GD – ĐT THÀNH PHỐ HỒ CHÍ MINH NĂ...
80 ĐỀ THI THỬ TUYỂN SINH TIẾNG ANH VÀO 10 SỞ GD – ĐT THÀNH PHỐ HỒ CHÍ MINH NĂ...
 
Mattingly "AI and Prompt Design: LLMs with NER"
Mattingly "AI and Prompt Design: LLMs with NER"Mattingly "AI and Prompt Design: LLMs with NER"
Mattingly "AI and Prompt Design: LLMs with NER"
 
OSCM Unit 2_Operations Processes & Systems
OSCM Unit 2_Operations Processes & SystemsOSCM Unit 2_Operations Processes & Systems
OSCM Unit 2_Operations Processes & Systems
 
diagnosting testing bsc 2nd sem.pptx....
diagnosting testing bsc 2nd sem.pptx....diagnosting testing bsc 2nd sem.pptx....
diagnosting testing bsc 2nd sem.pptx....
 
How to Send Pro Forma Invoice to Your Customers in Odoo 17
How to Send Pro Forma Invoice to Your Customers in Odoo 17How to Send Pro Forma Invoice to Your Customers in Odoo 17
How to Send Pro Forma Invoice to Your Customers in Odoo 17
 
PSYPACT- Practicing Over State Lines May 2024.pptx
PSYPACT- Practicing Over State Lines May 2024.pptxPSYPACT- Practicing Over State Lines May 2024.pptx
PSYPACT- Practicing Over State Lines May 2024.pptx
 
8 Tips for Effective Working Capital Management
8 Tips for Effective Working Capital Management8 Tips for Effective Working Capital Management
8 Tips for Effective Working Capital Management
 
VAMOS CUIDAR DO NOSSO PLANETA! .
VAMOS CUIDAR DO NOSSO PLANETA!                    .VAMOS CUIDAR DO NOSSO PLANETA!                    .
VAMOS CUIDAR DO NOSSO PLANETA! .
 
TỔNG HỢP HƠN 100 ĐỀ THI THỬ TỐT NGHIỆP THPT TOÁN 2024 - TỪ CÁC TRƯỜNG, TRƯỜNG...
TỔNG HỢP HƠN 100 ĐỀ THI THỬ TỐT NGHIỆP THPT TOÁN 2024 - TỪ CÁC TRƯỜNG, TRƯỜNG...TỔNG HỢP HƠN 100 ĐỀ THI THỬ TỐT NGHIỆP THPT TOÁN 2024 - TỪ CÁC TRƯỜNG, TRƯỜNG...
TỔNG HỢP HƠN 100 ĐỀ THI THỬ TỐT NGHIỆP THPT TOÁN 2024 - TỪ CÁC TRƯỜNG, TRƯỜNG...
 
DEMONSTRATION LESSON IN ENGLISH 4 MATATAG CURRICULUM
DEMONSTRATION LESSON IN ENGLISH 4 MATATAG CURRICULUMDEMONSTRATION LESSON IN ENGLISH 4 MATATAG CURRICULUM
DEMONSTRATION LESSON IN ENGLISH 4 MATATAG CURRICULUM
 

CRISC Certification Training Brochure.pdf

  • 2. Why take up CRISC CERTIFICATION TRAINING? The Certified in Risk and Information Systems Control (CRISC) training course provides participants with an in-depth awareness of diverse business risks, as well as the practical knowledge and skills necessary to implement effective IS controls within a company. CRISC is the most updated and holistic test available for evaluating IT professionals and other industry and financial sector employees. The CRISC online course prepares IT professionals for the specific difficulties presented by information systems. CRISC (Certified in Risk and Information Systems Control) is an IT certification for enterprise risk management. The average salary of a CRISC certified professional is in the range of USD 90,000 to USD 192,000 per annum in the US.
  • 3. Who can take up CRISC TRAINING? Job roles that can find PMP training beneficial are: IT Professionals Project Managers Business Analysts CEOs CFOs Chief Audit Executives CIOs/CISOs Audit Partners Security Managers Risk Officers Compliance Professionals Consultants • Anybody who wants to gain knowledge of CRISC to achieve risk management proficiency • Professionals who are looking sit for the CRISC certification exam
  • 4. Why Take up CRISC TRAINING FROM SPOCLEARN? 4-day interactive instructor-led CRISC Training z 100% Money-Back Guarantee z Expert CRISC trainers across the globe z Accredited CRISC course material prepared by SMEs z Case Studies with real-world examples z After training coaching for real-world application z Course Completion Certificate provided after the training z
  • 5. CRISC CERTIFICATION ELIGIBILITY CRITERIA • There are no prerequisites required to take up the CRISC training. Anybody who wants to understand about risk management and information security best practices can be part of this CRISC training. • However, if you are looking to earn the CRISC credential from ISACA, then you have to: • Pass the CRISC Exam within the last 5 years. • Have the relevant full-time work experience in the CRISC exam content outline.
  • 6. CRISC CERTIFICATION EXAM FORMAT Exam Type Multiple Choice No. of Questions 150 questions Passing Score 450 out of 800 Exam duration 240 minutes (Four hours) (Above 57%) Type: Closed Book Exam Language: English 01 02 03 04
  • 7. Certified in Risk and Information Systems Control (CRISC) Training Agenda
  • 8. GOVERNANCE (26%) 1 A—ORGANIZATIONAL GOVERNANCE v Organizational Strategy, Goals, and Objectives v Organizational Structure, Roles and Responsibilities v Organizational Culture v Policies and Standards v Business Processes v Organizational Assets B—RISK GOVERNANCE v Enterprise Risk Management and Risk Management Framework v Three Lines of Defense v Risk Profile v Risk Appetite and Risk Tolerance v Legal, Regulatory and Contractual Requirements v Professional Ethics of Risk Management
  • 9. IT RISK ASSESSMENT (20%) 2 A—IT RISK IDENTIFICATION v Risk Events (e.g., contributing conditions, loss result) v Threat Modelling and Threat Landscape v Vulnerability and Control Deficiency Analysis (e.g., root cause analysis) v Risk Scenario Development B—IT RISK ANALYSIS AND EVALUATION v Risk Assessment Concepts, Standards and Frameworks v Risk Register v Risk Analysis Methodologies v Business Impact Analysis v Inherent and Residual Risk
  • 10. RISK RESPONSE AND MITIGATION (32%) 3 A—RISK RESPONSE v Risk Treatment / Risk Response Options v Risk and Control Ownership v Third-Party Risk Management v Issue, Finding and Exception Management v Management of Emerging Risk B—CONTROL DESIGN AND IMPLEMENTATION v Control Types, Standards and Frameworks v Control Design, Selection and Analysis v Control Implementation v Control Testing and Effectiveness Evaluation C—RISK MONITORING AND REPORTING v Risk Treatment Plans v Data Collection, Aggregation, Analysis and Validation v Risk and Control Monitoring Techniques v Risk and Control Reporting Techniques (heatmap, scorecards, dashboards) v Key Performance Indicators v Key Risk Indicators (KRIs) v Key Control Indicators (KCIs)
  • 11. INFORMATION TECHNOLOGY AND SECURITY (22%) 4 A—INFORMATION TECHNOLOGY PRINCIPLES v Enterprise Architecture v IT Operations Management (e.g., change management, IT assets, problems, incidents) v Project Management v Disaster Recovery Management (DRM) v Data Lifecycle Management v System Development Life Cycle (SDLC) v Emerging Technologies B—INFORMATION SECURITY PRINCIPLES v Information Security Concepts, Frameworks and Standards v Information Security Awareness Training v Business Continuity Management v Data Privacy and Data Protection Principles
  • 12. LEARNING ROADMAP FOR YOU Understand the learning objectives that fits your learning need Contact our coach and consultants and understand in depth Block your seat Relate to how it can help you Talk to the trainer for more clarity Continuously learn and apply the learning 1 3 5 2 4 6
  • 13. Connect with us now! Talk to our consultant USA: +1 (832) 924 0564 IND: +91 83417-05065 UK: +44 807 164 0572 You can also email us at info@spoclearn.com support@spoclearn.com