Introduction
Welcome to the CRISC course and instructor introduction
()
1. Module 1 | Course Overview and Instructor Introduction
IT risk management lifecycle
()
Key terms and definitions
()
2. Module 2 | Domain 1: Governance
Organizational governance and risk governance
()
Strategy, goals, objectives and risk management
()
Organizational culture, ethics and behavior
()
External requirements and governance documents
()
Risk management standards and guidance from the industry
()
Business process reviews and types of business risk
()
Asset management
()
Business continuity, technology resilience, and disaster recovery
()
Enterprise risk management and risk appetite
()
Lines of defense model
()
3. Module 3 | Domain 2: Risk Assessment
Risk events and risk factors
()
Methods to identify risk and potential changes
()
Threats
()
Vulnerability management
()
IT risk scenarios
()
Risk assessment techniques
()
Risk ranking
()
Risk and control ownership and accountability
()
Risk register
()
Inherent, residual, and current risk
()
Important term differentiation
()
4. Module 4 | Domain 3: Risk Response and Reporting
Risk response options and selection
()
Third-party risk and control
()
Risk action plans
()
Control standards, frameworks, and types of controls
()
Control design and selection
()
Control testing
()
Data collection and reporting
()
Metrics
()
Monitoring, reporting and associated techniques
()
Issues, findings and exceptions
()
5. Module 5 | Domain 4: Technology and Security
Architecture and IT operations
()
Networks and configuration management
()
SDLC
()
Data lifecycle management and data privacy
()
Portfolio and project management
()
Emerging tech
()
Security topics
()
Security and risk awareness training
()
Conclusion
Course conclusion
()