(CRISC) Certified In Risk and Information System Control

Durée

4,00 jour(s)

Langue(s) de prestation

EN FR

Prochaine session

Qui organise cette formation ?

Améliorer à la fois l'épanouissement individuel et l'efficacité par le partage de la compétence informatique et de l'expérience managériale de nos intervenants. Nous délivrons plus de 300 cours en français et en anglais dans notre centre à Capellen. Ces formations sont orientées infrastructure, développement, project management, gouvernance et softskills.

Le contenu de cette page n'est pas disponible en français

Prérequis

There is no prerequisite to take the CRISC® exam; however, in order to apply for CRISC® certification, you must meet the necessary experience requirements as determined by ISACA.
Participants should have a basic knowledge of the areas to be covered. The course consists of intense preparation for the certification exam.
English is required for the exam.

Objectifs

This 4-Day training prepares the professionals who want to pass the ISACA’s Certified in Risk and Information System Control CRISC® exam. The program covers the four key areas covered in the exam: Governance, IT Risk Assessment, Risk Response and Reporting, Information Technology and Security The program is aligned on the latest Edition (7th) of the CBK (Common Body of Knowledge) from the ISACA®CRISC® certification is recognised around the world.

Contenu

Day One: Introduction & Chapter 1: Governance

Organizational Strategy, Goals and Objectives
Organization structure, Roles and Responsibilities
Organizational Structure
Policies and Standards
Business Process Review
Organization assets
Enterprise Risk Management and Risk Management Frameworks
Three Lines of Defence
Risk Profile
Risk Appetite, Tolerance and Capacity
Legal, Regulatory and Contractual Requirements
Exercises - Multiple Choice questions in between chapters and at the end of each chapter

Day Two: Chapter 2: IT Risk Assessment

Risk Events
Threat Modelling and Threat landscape
Vulnerability and Control Deficiency Analysis
Risk Scenario Development
Risk Assessment Concepts, Standards and Frameworks
Risk Register
Risk Analysis Methodologies
Business Impact Analysis
Inherent, Residual and Current risk
Exercises - Multiple Choice questions in between chapters and at the end of each chapter

Day Three: Chapter 3: Risk Response and Reporting

Risk and Control Ownership
Risk Treatment/Risk Response Options
Third-party Risk Management
Issues, Finding and Exception Management
Management of Emerging risk
Control Types, Standards and Frameworks
Control Design, Selection and Analysis
Control Implementation
Control Testing and Effectiveness Evaluation
Risk Treatment Plans
Data Collection, Aggregation, Analysis and Validation
Risk and Control Monitoring Techniques
Risk and Control Reporting Techniques
Key Performances Indicators
Key Risk Indicators
Key Control Indicators
Exercises - Multiple Choice questions in between chapters and at the end of each chapter

Day Four: Chapter 4: Information Technology and Security

Enterprise Architecture
IT Operations Management
Project Management
Enterprise Resiliency
Data Life Cycle Management
System Development Life Cycle
Emerging Trends in Technology
Information Security Concepts, Frameworks and Standards
Information Security Awareness Training
Data Privacy and Principles of Data Protection
Exercises - Multiple Choice questions in between chapters and at the end of each chapter