Certified in Risk and Information Systems Control (CRISC) by ISACA

COURSE REQUIREMENTS

There are no prerequisites for this course.

COURSE SYLLABUS

The Certified in Risk and Information Systems Control (CRISC) certification, offered by ISACA, is designed for professionals who manage IT risks and oversee information systems controls. The CRISC exam evaluates candidates across four key domains: Governance; IT Risk Assessment; Risk Response and Reporting; and Information Technology and Security.

• Governance: This domain assesses understanding of organizational governance, including strategy, structure, policies, and risk management frameworks.
• IT Risk Assessment: Focuses on identifying and evaluating threats and vulnerabilities to an organization’s IT infrastructure.
• Risk Response and Reporting: Covers the development and management of risk treatment plans, control design and implementation, and effective communication of risk and control information.
• Information Technology and Security: Examines alignment of business practices with IT and security standards, promoting a risk-aware culture, and implementing security awareness training.