ISACA Certified in Risk and Information Systems Control

ISACA Certified in Risk and Information Systems Control (CRISC) Exam Prep Course

Objectives:

• Understand the principles and importance of IT governance.
• Learn how to align IT strategy with business objectives.
• Explore frameworks such as COBIT and ITIL.

Topics Covered:

• Definition and Scope of IT Governance
• The Role of IT in Business Strategy
• Frameworks and Standards (COBIT, ITIL, ISO/IEC 38500)
• Measuring and Monitoring IT Governance Effectiveness

Activities:

• Case studies on successful IT governance implementations
• Group discussion on aligning IT strategy with business goals

Objectives:

• Understand the difference between policies, standards, guidelines, and procedures.
• Learn how to develop and implement effective IT policies.

Topics Covered:

• Definitions and Examples of IT Policies
• Developing and Documenting IT Standards
• Guidelines vs. Procedures: Key Differences
• Ensuring Compliance with Policies and Standards

Activities:

• Workshop on drafting IT policies
• Group activity to identify gaps in IT guidelines

Objectives:

• Learn the importance of organizational structure in IT governance.
• Understand different models for IT organizational design.

Topics Covered:

• Centralized vs. Decentralized IT Structures
• Roles and Responsibilities in IT Governance
• IT Governance Committees and their Functions

Activities:

• Case studies of IT organizational structures
• Role-playing scenarios for IT governance decision-making

4. Enterprise Risk Management

Objectives:

• Understand the role of IT in enterprise risk management.
• Learn how to identify, assess, and mitigate IT risks.

Topics Covered:

• Introduction to Enterprise Risk Management (ERM)
• IT Risk Assessment and Mitigation Techniques
• Integrating IT Risk Management with Business Strategies
• Tools for IT Risk Monitoring and Reporting

Activities:

• Risk assessment simulation exercises
• Developing a risk mitigation plan for a hypothetical enterprise

5. Maturity Models

Objectives:

• Understand the concept of maturity models in IT governance.
• Learn how to evaluate and improve IT governance practices using maturity models.

Topics Covered:

• Overview of Maturity Models (e.g., CMMI, COBIT Maturity Model)
• Assessing IT Governance Maturity
• Steps to Improve IT Maturity Levels
• Benchmarking and Continuous Improvement

Activities:

• Self-assessment using a maturity model
• Group project to develop a roadmap for improving IT governance maturity

Course Date and Time

1. Lessons: 22, 23 Feb & 1, 2 Mar ( 9:30am-5:30pm) Full day. 8 hrs x 4

2. Exam Prep Lesson: 21 & 28 Feb (6:30pm-10:30pm). 4hrs x 2

Total: 40hrs

Online course plus mock exam on site

Domains:

Governance (26 percent)

IT risk assessment (20 percent)

Risk response and reporting (32 percent)

Information technology and security (22 percent)

Tutor: Alfred S.

Course fee: HKD$19,000

- Inclusive of One time exam fee