CRISC: Certified in Risk and Information Systems Control

Packt via Coursera Specialization

Go to class Write review

Overview

Coursera Flash Sale

40% Off Coursera Plus for 3 Months!

Grab it

Updated in May 2025. This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. Start your journey by exploring the fundamentals of IT risk management, where key concepts and frameworks are introduced to demonstrate how risk management plays a critical role in shaping business decisions. You will gain an understanding of the connection between IT risk and overall business objectives, emphasizing the importance of aligning risk management strategies with organizational goals. As the course progresses, you’ll explore the RACI chart's role in IT risk management, providing a practical framework for assigning responsibility. The course also examines how organizational culture and structure influence risk management effectiveness. You’ll assess various risks, like project and change risks, and gain insights into the interplay between people, technology, and risk. You’ll learn to implement controls, test their effectiveness, and manage risk response plans, with a focus on risk communication and ensuring proper policies and procedures. By course end, you’ll be prepared to apply these skills effectively in real-world IT risk management scenarios. Basic knowledge of IT systems and an understanding of risk concepts. No prior experience in risk management is required, but it’s helpful for CRISC candidates.

Syllabus

Course 1: Governance and Risk Management Concepts
Course 2: IT Risk Assessment Practices
Course 3: Risk Response and Reporting Effectively
Course 4: Information Technology and Security Principles

Courses

0 reviews
7 hours 1 minute
View details

Dive into the world of IT risk management with a structured approach to mastering the concepts that drive effective governance. Begin your journey by exploring the fundamentals of IT risk management, including how to align risk management strategies with overall business objectives. You’ll get acquainted with essential tools like the RACI chart, which helps define roles and responsibilities within your organization, ensuring that risk management is integrated seamlessly into your business processes. Next, delve into the critical influence of organizational structure and culture on the risk management framework. Learn about the various roles and responsibilities in risk management, and understand how a balanced risk culture can drive better decision-making and outcomes. You’ll explore the importance of clear communication in risk management and discover strategies for fostering a positive risk culture that supports organizational growth and resilience. The course then focuses on the practical aspects of developing and implementing risk management policies and standards. You will learn how to identify and evaluate opportunities for risk management across different business processes, ensuring alignment between IT risk strategies and broader business goals. Additionally, the module covers the creation of risk profiles and discusses how to determine risk appetite and capacity while adhering to legal and regulatory requirements. This comprehensive guide will leave you with the expertise to implement robust risk management practices that protect and empower your organization. This course is designed for IT professionals, risk managers, and business leaders who are responsible for implementing risk management strategies within their organizations. A basic understanding of business processes and IT systems is recommended to fully grasp the course material.
0 reviews
5 hours 59 minutes
View details

Updated in May 2025. This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. This course begins by laying a strong foundation in risk identification and analysis. You'll explore the initial stages of the risk management lifecycle, focusing on pinpointing potential risk events and factors that could impact your organization. By delving into threat modeling and abuse-case modeling, you will gain a hands-on understanding of how to anticipate and mitigate risks before they become real-world issues. As the course progresses, you will be introduced to the essential practices of vulnerability assessment and testing. This module covers a range of techniques and tools designed to help you identify and test for vulnerabilities within your IT infrastructure. Through practical exercises, you will learn to create realistic risk scenarios, enhancing your ability to respond effectively to security breaches and potential threats. The course concludes with an in-depth exploration of risk assessment standards, tools, and methodologies. You will learn how to systematically analyze risks and their potential impact on business operations. By understanding how to conduct business impact analysis and categorize different types of risks, you will be well-prepared to develop robust risk management and business continuity strategies that align with your organization’s goals. This course is designed for IT professionals, risk managers, and cybersecurity analysts with a foundational understanding of IT concepts. Prior knowledge of basic cybersecurity principles is recommended but not required.
0 reviews
6 hours 8 minutes
View details

The course begins with an introduction to enterprise architecture and IT fundamentals, laying the groundwork for understanding how different technological components contribute to overall risk. You will explore the roles of hardware, software, networking, and cloud technologies, and learn how to incorporate these elements into comprehensive risk management strategies. This foundational knowledge will help you appreciate the complexities of IT infrastructure and its impact on organizational risk. As the course progresses, you will delve into IT project and lifecycle risk management. This module focuses on the unique challenges posed by IT projects, emphasizing the importance of managing risks throughout the project and system development lifecycles. You will learn to develop and implement disaster recovery and business continuity plans, ensuring your organization is prepared to handle potential disruptions and maintain operational resilience in the face of unexpected events. In the latter part of the course, attention shifts to the rapidly evolving landscape of emerging technologies and the critical importance of information security. You will gain a thorough understanding of core security principles such as confidentiality, integrity, and availability. Additionally, this module covers advanced security measures and data privacy fundamentals, equipping you with the knowledge to implement effective access controls and encryption techniques. By the end of the course, you will be well-versed in the strategies needed to navigate data privacy regulations and protect sensitive information against emerging threats. This course is designed for IT professionals, security analysts, and risk managers who want to deepen their understanding of IT and security principles. A basic familiarity with IT concepts and security fundamentals is recommended.
0 reviews
6 hours 19 minutes
View details

Updated in May 2025. This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. This course starts with a comprehensive overview of risk response strategies, guiding you through various approaches to managing identified risks. You’ll learn how to choose the most appropriate strategies based on risk severity and organizational context. The module also covers the importance of defining risk ownership, managing third-party risk exposure, and understanding when to accept or mitigate risks, providing a solid foundation for proactive risk management. Next, you will delve into the design and implementation of risk controls. This module offers a complete view of the risk control lifecycle, from initial design and selection to implementation and rigorous testing. You’ll gain practical insights into best practices for developing effective controls and learn how continuous testing ensures that these controls remain robust and effective over time. This knowledge is critical for maintaining a strong risk management posture in the face of evolving threats. The course concludes by focusing on risk response planning, data management, and reporting. You will learn how to develop comprehensive risk response plans and implement data management strategies that support ongoing risk analysis. Additionally, you’ll explore how to use key performance indicators (KPIs), key risk indicators (KRIs), and key control indicators (KCIs) to create detailed risk reports that provide valuable insights to stakeholders. This final module ensures that you are equipped to communicate risk performance clearly and effectively, enabling better decision-making at all organizational levels. This course is ideal for risk managers, IT professionals, and business analysts who are involved in risk management and reporting. A basic understanding of risk management principles is recommended but not required.