Certified in Risk and Information Systems Control (CRISC)

Skip to Scheduled Dates

Course Overview

Looking to move up in risk management or earn one of the world’s top-paying IT certifications? The CRISC Certification Training course prepares you to take the CRISC exam and build practical expertise in risk and information systems control—essential skills for today’s digital enterprises.

Developed around the latest ISACA certification framework, this course equips you to assess IT and enterprise risk, develop effective risk response plans, and monitor control performance. You'll gain the insight and preparation you need to pursue the CRISC certification exam, enhance your governance capabilities, and meet the challenges of modern compliance and risk management roles.

Who Should Attend

IT risk management professionals with at least 3 years of relevant professional work experience in IT risk and information systems control including:

  • Security Directors/Managers/Consultants
  • Compliance/Risk/Privacy Directors and Managers
  • IT Audit Directors/Managers/Consultants
  • Compliance/Risk/Control Staff

Course Objectives

    This training prepares you to:

    • Identify and assess IT and enterprise risk in support of strategic business goals
    • Recommend and implement appropriate information security and IS controls
    • Build risk response and mitigation plans aligned to business priorities
    • Establish governance processes for continuous monitoring and reporting
    • Prepare for the CRISC certification exam through real-world examples, CRISC exam prep, and sample CRISC questions

    You’ll leave this course ready to pass the CRISC, meet ISACA’s professional standards, and contribute to your organization’s resilience and regulatory readiness.

Course Outline

Domain 1: IT Risk Identification

  • Analyze internal and external factors affecting enterprise risk
  • Identify threats and develop IT risk scenarios
  • Document risk scenarios in a comprehensive risk register
  • Align IT risk with business objectives and risk appetite

Domain 2: IT Risk Assessment

  • Evaluate the likelihood and impact of risk scenarios
  • Review control effectiveness and identify mitigation gaps
  • Support informed risk assessment decisions
  • Update risk registers and communicate findings

Domain 3: Risk Response and Mitigation

  • Align response plans with enterprise strategy
  • Design and implement control activities
  • Validate the execution of risk response actions
  • Assist in documentation and risk management accountability

Domain 4: Risk and Control Monitoring and Reporting

  • Define and monitor KRIs and KPIs
  • Identify trends in control and information technology risk
  • Report on control effectiveness and enable decision making
  • Maintain alignment with compliance and ISACA best practices

< Back to Course Search

Class Dates & Times

Class times are listed Eastern time

This is a 3-day class

Register for Class

Register When Time Where How
Register 09/03/2025 9:00AM - 5:00PM Online VILT
Register 11/24/2025 9:00AM - 5:00PM Online VILT

The classes listed are available to all United Training customers and does not reflect, in any way,
the availability or support of technology within the University of Maine System.