Certified in Risk and Information Systems Control introduction

• CRISC Overview.
• Presentation of the examination model and the certification process.

Domain 1: identification, analysis and risk assessment

• Risk management standards : ISO 31000, ISO 27005, ...
• Risk management referentials : RISK IT, COSO ERM, COBIT, ...
• Components, principles and corporate risk management concepts.
• The risks at various levels of the company.
• Risk identification methods.
• Analysis methods and risk assessment.
• Quantitative and qualitative risk analysis.

Domain 2: risk responses

• Risk treatment modes.
• Risk mitigation and control information system.
• Risk reduction.
• Transfer of risk.
• Residual risk acceptance.
• Risk treatment plans.

Domain 3: risk monitoring

• Lifecycle risk treatment.
• Treaty monitoring risks.
• Monitoring residual risks.
• Performance evaluation of risk management and risk reporting.
• Key risk indicators (KRI).
• Risk management & profession resilience.

Domain 4: information system controls

• IT controls definition.
• IT controls implementation.
• Measurement of processes and services related to the IT controls.

Domain 5: Life cycle of IT controls

• Strategic planning of IT controls life cycle management.
• Scope, objectives and benefits of IT controls life cycle management programs.
• Continuous monitoring of IT controls.
• IT controls maintenance.
• Continuous improvement of risk management and IT controls.
• Periodic reporting of the effectiveness IT controls.

Exam preparation

• Good practice for the exam.
• Exam simulation and collective correction.