ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide

Table of Contents

1. Governance, Risk, and Compliance
2. CRISC Practice Areas and the ISACA Mindset
3. Organizational Governance, Policies, and Risk Management
4. The Three Lines of Defense and Cybersecurity
5. Legal Requirements and the Ethics of Risk Management
6. Risk Management Life Cycle
7. Threat, Vulnerability, and Risk
8. Risk Assessment Concepts, Standards, and Frameworks
9. Business Impact Analysis, and Inherent and Residual Risk
10. Risk Response and Control Ownership
11. Third-Party Risk Management
12. Control Design and Implementation
13. Log Aggregation, Risk and Control Monitoring, and Reporting
14. Enterprise Architecture and Information Technology
15. Enterprise Resiliency and Data Life Cycle Management
16. The System Development Life Cycle and Emerging Technologies
17. Information Security and Privacy Principles
18. Practice Quiz - Part 1
19. Practice Quiz - Part 2