Certified In Risk And Information Systems Control (CRISC) - Burkina Faso

Certified Risk and Information Systems Control (CRISC) Course Outline

Domain 1: Governance

Module 1: Organisational Governance

• Organisational Strategy, Goals, and Objectives
• Organisational Structure, Roles, and Responsibilities
• Organisational Culture
• Policies and Standards
• Business Process Review
• Organisational Assets

Module 2: Risk Governance

• Enterprise Risk Management and Risk Management Frameworks
• Three Lines of Defence
• Risk Profile
• Risk Appetite, Tolerance and Capacity
• Legal, Regulatory and Contractual Requirements
• Professional Ethics of Risk Management

Domain 2: IT Risk Assessment

Module 3: IT Risk Identification

• Risk Events
• Threat Modelling and Threat Landscape
• Vulnerability and Control Deficiency Analysis
• Risk Scenario Development

Module 4: IT Risk Analysis, Evaluation and Assessment

• Risk Assessment Concepts, Standards, and Frameworks
• Risk Register
• Risk Analysis Methodologies
• Business Impact Analysis
• Inherent, Residual, and Current Risk

Domain 3: Risk Response and Reporting

Module 5: Risk Response

• Risk and Control Ownership
• Risk Treatment/Risk Response Options
• Third Party Risk Management
• Issue, Finding and Expectation Management
• Management of Emerging Risk

Module 6: Control, Design and Implementation

• Control Types, Standards, and Frameworks
• Control Design, Selection, and Analysis
• Control Implementation
• Control Testing and Effectiveness Evaluation

Module 7: Risk Monitoring and Reporting

• Risk Treatment Plans
• Data Collection, Aggregation, Analysis, and Validation
• Risk and Control Monitoring Techniques
• Key Performance Indicators
• Key Risk Indicators
• Key Control Indicators

Domain 4: Information Technology and Security

Module 8: Information Technology Principles

• Enterprise Architecture
• IT Operations Management
• Project Management
• Enterprise Resiliency
• Data Life Cycle Management
• System Development Life Cycle
• Emerging Trends in Technology

Module 9: Information Security Principles

• Information Security Concepts, Frameworks, and Standards
• Information Security Awareness Training
• Data Privacy and Principles of Data Protection

Who should attend this Certified in Risk and Information Systems Control Course?

The Certified in Risk and Information Systems Control (CRISC) is a professional certification designed for IT professionals responsible for managing risk and ensuring information systems security. The course can be helpful for various professionals including:

• Risk Managers
• Information Security Managers
• IT Auditors
• Compliance Officers
• C-suite Executives
• Project Managers
• Security Engineers

Prerequisites of the Certified in Risk and Information Systems Control Training Course

There are no formal prerequisites for this Certified in Risk and Information Systems Control (CRISC) Training Course.

Certified Risk and Information Systems Control (CRISC) Course Overview

CRISC (Certified in Risk and Information Systems Control) is an enterprise risk management certification for IT professionals. It helps them to acquire skills and knowledge for identifying and managing enterprise IT risk. CRISC focuses on the organisational framework for managing and mitigating risk across business processes and technology.

This CRISC Training Course aims to provide delegates with valuable technical skills, ensuring success and prosperity in the empire of IT security. Pursuing this training will help Risk Managers, Information Security Managers, and IT Auditorsto develop and establish their useful and preferred IT security careers worldwide.

In this 3-day Certified in Risk and Information Systems Control (CRISC) Training Course, by The Knowledge Academy delegates will gain in-depth knowledge about the methods and processes associated with risk identification, risk analysis, responding to risk, and controlling risk. During this training, delegates will cover various concepts such as organisational governance, IT risk assessment, risk response, project management, enterprise resiliency, information technology and security, business impact analysis, etc.

Course Objectives

• To provide delegates with an in-depth understanding of the frameworks and practices involved in IT risk identification and management
• To equip delegates with the skills necessary to design and implement robust information systems controls tailored to their organisation's needs
• To enhance delegates' ability to effectively assess and mitigate IT risks
• To develop delegates' competence in establishing a risk management strategy that is compliant with global standards and best practices
• To foster critical thinking and problem-solving skills among delegates

Upon completion of the CRISC (Certified in Risk and Information Systems Control) Training Course, delegates will be equipped with a robust understanding of IT risk management and the ability to design, implement, monitor, and maintain information systems controls. Holding the required expertise and knowledge of CRISC domains will help individuals grow their careers as risk professionals and provide value to their company.

What’s included in this Certified in Risk and Information Systems Control Course?

• World-Class Training Sessions from Experienced Instructors
• Certified in Risk and Information Systems Control Certificate
• Digital Delegate Pack