You're reading from ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide

Product type Book

Published in Sep 2023

Publisher Packt

ISBN-13 9781803236902

Pages 316 pages

Edition 1st Edition

Languages

Concepts

Cybersecurity

Author (1):

Shobhit Mehta

Table of Contents (28) Chapters

Preface

1. Part 1: Governance, Risk, and Compliance and CRISC

2. Chapter 1: Governance, Risk, and Compliance

3. Chapter 2: CRISC Practice Areas and the ISACA Mindset

4. Part 2: Organizational Governance, Three Lines of Defense, and Ethical Risk Management

5. Chapter 3: Organizational Governance, Policies, and Risk Management

6. Chapter 4: The Three Lines of Defense and Cybersecurity

7. Chapter 5: Legal Requirements and the Ethics of Risk Management

8. Part 3: IT Risk Assessment, Threat Management, and Risk Analysis

9. Chapter 6: Risk Management Life Cycle

10. Chapter 7: Threat, Vulnerability, and Risk

11. Chapter 8: Risk Assessment Concepts, Standards, and Frameworks

12. Chapter 9: Business Impact Analysis, and Inherent and Residual Risk

13. Part 4: Risk Response, Reporting, Monitoring, and Ownership

14. Chapter 10: Risk Response and Control Ownership

15. Chapter 11: Third-Party Risk Management

16. Chapter 12: Control Design and Implementation

17. Chapter 13: Log Aggregation, Risk and Control Monitoring, and Reporting

18. Part 5: Information Technology, Security, and Privacy

19. Chapter 14: Enterprise Architecture and Information Technology

20. Chapter 15: Enterprise Resiliency and Data Life Cycle Management

21. Chapter 16: The System Development Life Cycle and Emerging Technologies

22. Chapter 17: Information Security and Privacy Principles

23. Part 6: Practice Quizzes

24. Chapter 18: Practice Quiz – Part 1

25. Chapter 19: Practice Quiz – Part 2

26. Index

Why subscribe?

27. Other Books You May Enjoy

Preface

Welcome to this comprehensive guide to Certified in Risk and Information Systems Control (CRISC) by ISACA, the globally recognized authority on Information Technology (IT) governance and security. As organizations continue to rely more on technology to achieve their business objectives, it’s becoming increasingly important for IT professionals to have the skills and knowledge necessary to manage risks effectively. The CRISC certification is designed to help IT professionals develop the expertise needed to identify, evaluate, and mitigate risks related to information systems. The certification is highly valued by employers and is considered a prerequisite for many senior-level positions.

In addition to the professional benefits of earning the CRISC certification, certified professionals have demonstrated that they possess the skills and knowledge necessary to manage information system risks effectively. This knowledge and expertise can help them make more informed decisions and improve their job performance. Furthermore, CRISC-certified professionals are in high demand and can expect to earn a higher salary than their non-certified peers. According to a survey conducted by ISACA, CRISC is the #4 top-paying certification worldwide.

This book is designed to help you achieve the CRISC certification and prepare you for the challenges of managing risks within organizations. The book is divided into three sections to provide a complete and thorough understanding of the CRISC certification and its syllabus:

The first section provides a primer on Governance, Risk, and Compliance (GRC), CRISC practice areas, and the ISACA mindset, which is essential for the certification
The second section covers the core content of the CRISC syllabus
The final section includes a practice quiz with detailed explanations

Whether you are a seasoned IT professional or just starting your career in IT, this book will provide you with the necessary tools and knowledge to pass the CRISC certification exam. We hope that this book will help you achieve your professional goals, improve your job performance, and take your career to the next level.