CRISC (Certified in Risk and Information System Control )

The mark of excellence for a professional certification program is the value and recognition it bestows on the individual who achieves it. The Certified in Risk and Information Systems Control (CRISC) program, sponsored by ISACA, recognizes a wide range of professionals for their knowledge of enterprise risk and their ability to design, implement, monitor and maintain information systems (IS) control to mitigate such risk.
The CRISC certification, CRISCTM, pronounced “see risk,” is designed for IT professionals who have hands-on experience with risk identification, assessment and evaluation; risk response; risk monitoring; IS control design and implementation; and IS control monitoring and maintenance.
The CRISC designation will not only certify professionals who have knowledge and experience identifying and evaluating entity-specific risk, but also aid them in helping enterprises accomplish business objectives by designing, implementing, monitoring and maintaining risk-based, efficient and effective

CRISC demonstrates proven experience: Employers can be assured that CRISC-certified professionals have the proven experience and knowledge to help enterprises accomplish business objectives such as:

• Effective and efficient operations
• Designing, implementing, monitoring and maintaining risk-based, efficient and effective IS controls
• Compliance with regulatory requirements

Learning Level: Intermediate

Duration: 3day(s)

Risk Identification, Assessment and Evaluation (31 percent): Identify, assess and evaluate risk to enable the execution of the enterprise risk management strategy.

Risk Response (17 percent): Develop and implement risk responses to ensure that risk issues, opportunities and events are addressed in a cost-effective manner and in line with business objectives.

Risk Monitoring (17 percent): Monitor risk and communicate information to the relevant stakeholders to ensure the continued effectiveness of the enterprise's risk management strategy.

Information Systems Control Design and Implementation (17 percent): Design and implement information systems controls in alignment with the organization's risk appetite and tolerance levels to support business objectives.

Information Systems Control Monitoring and Maintenance (18 percent): Monitor and maintain information systems controls to ensure that they function effectively and efficiently.