CRISC Certification Boot Camp Outline

The Official ISACA courseware covers a broad spectrum of topics in the domains of the CRISC certification. With Training Camp’s exam prep guide your course content will always be up-to-date with the most current version of the exam. This mix of courseware offers an in-depth review of the CRISC as needed, and offers the advantage of Training Camp exam performance boosters.

Governance

A. Organizational Governance
-Organizational Strategy, Goals, and Objectives
-Organizational Structure, Roles, and Responsibilities
-Organizational Culture
-Policies and Standards
-Business Processes
-Organizational Assets
​
B. Risk Governance
-Enterprise Risk Management and Risk Management Framework
-Three Lines of Defense
-Risk Profile
-Risk Appetite and Risk Tolerance
-Legal, Regulatory, and Contractual Requirements
-Professional Ethics of Risk Management
​

IT Risk Assessment

A. IT Risk Identification
-Risk Events (e.g., contributing conditions, loss result)
-Threat Modelling and Threat Landscape
-Vulnerability and Control Deficiency Analysis (e.g., root cause analysis)
-Risk Scenario Development
​
B. IT Risk Analysis and Evaluation
-Risk Assessment Concepts, Standards, and Frameworks
-Risk Register
-Risk Analysis Methodologies
-Business Impact Analysis
-Inherent and Residual Risk
​

Risk Response and Reporting

A. Risk Response
-Risk Treatment / Risk Response Options
-Risk and Control Ownership
-Third-Party Risk Management
-Issue, Finding, and Exception Management
-Management of Emerging Risk
​
B. Control Design and Implementation
-Control Types, Standards, and Frameworks
-Control Design, Selection, and Analysis
-Control Implementation
-Control Testing and Effectiveness Evaluation
​
C. Risk Monitoring and Reporting
-Risk Treatment Plans
-Data Collection, Aggregation, Analysis, and Validation
-Risk and Control Monitoring Techniques
-Risk and Control Reporting Techniques (heatmap, scorecards, dashboards)
-Key Performance Indicators
-Key Risk Indicators (KRIs)
-Key Control Indicators (KCIs)
​

Information Technology and Security

A. Information Technology Principles
-Enterprise Architecture
-IT Operations Management (e.g., change management, IT assets, problems, incidents)
-Project Management
-Disaster Recovery Management (DRM)
-Data Lifecycle Management
-System Development Life Cycle (SDLC)
-Emerging Technologies
​
B. Information Security Principles
-Information Security Concepts, Frameworks, and Standards
-Information Security Awareness Training
-Business Continuity Management
-Data Privacy and Data Protection Principles

Is the CRISC certification right for me?

With a growing demand for individuals possessing IS audit, control and security skills, CRISC certification has become a preferred certification program by individuals and organizations around the world. Earning CRISCis globally recognized as the mark of excellence for the IS audit professional.

Earning CRISC certification helps show solid understanding about the impact of IT risk and how it relates to the overall organization, skill in the development of more effective plans to mitigate risk, and to establish a common perspective and language about IT risk that can set the standard for the enterprise.

IT professionals must have 5 years or more of IS audit, control, assurance and security experience. A master’s degree in information security or information technology from an accredited university can be substituted for 1 year of experience. A maximum of 1 year of information systems experience OR 1 year of non-IS auditing experience can be substituted for 1 year of experience.