The CRISC Online Review Course is an online preparation course that will prepare you for the CRISC certification exam using proven instructional design techniques and interactive activities. The course covers all four of the CRISC domains. The course incorporates video, interactive eLearning modules, downloadable, interactive workbooks, downloadable job aids, case study activities, and pre- and post-course assessments. You will be able to navigate the course at your own pace, following a recommended structure, or target preferred job practice areas. You may also start and stop the course based on your study schedule, picking up exactly where you left off the next time you access.

The CRISC credential is intended for risk and control professionals, including:

• IT professionals
• Risk professionals
• Control professionals
• Business analysts
• Project managers
• Compliance professionals

1 - Introduction to IT Risk Management

Governance and Risk management

The Context of IT Risk Management

Key Concepts of Risk

Risk in Relation to Other Business Functions

IT Risk Management Good Practices

2 - IT Risk Identification

Risk Capacity, Risk Appetite and Risk Tolerance

Risk Culture and Communication

Elements of Risk

Information Security Risk Concepts and Principles

The IT Risk Strategy of the Business

IT Concepts and Areas of Concern for the Risk Practitioner

Methods of Risk Identification

IT Risk Scenarios

Ownership and Accountability

The IT Risk Register

Risk Awareness

3 - IT Risk Assessment

Risk Assessment Techniques

Analyzing Risk Scenarios

Current State of Controls

Changes in the Risk Environment

Project and Program Management

Risk and Control Analysis

Risk Analysis Methodologies

Risk Ranking

Documenting Risk Assessments

4 - Risk Response and Mitigation

Aligning Risk Response with Business Objectives

Risk Response Options

Analysis Techniques

Vulnerabilities Associated with New Controls

Developing a Risk Action Plan

Business Process Review Tools and Techniques

Control Design and Implementation

Control Monitoring and Effectiveness

Types of Risk

Control Activities, Objectives, Practices and Metrics

Systems Control Design and Implementation

Impact of Emerging Technologies on Design and Implementation of Controls

Control Ownership

Risk management Procedures and Documentation

5 - Risk and Control Monitoring and Reporting

Key Risk Indicators

Key Performance Indicators

Data Collection and Extraction Tools and Techniques

Monitoring Controls

Control Assessment Types

Results of Control Assessments

Changes to the IT Risk Profile