CRISC

Course
Time
6 hours 30 minutes
Difficulty
Advanced
CEU/CPE
7

Video Transcription

00:00
Let's stop for a minute about who should take the sea risk exam. So what we're looking for is people that are needing to increase their knowledge of risk management from perhaps a more formalized method. You know, many of us understand risk management to a degree, but we really haven't had formal training.
00:19
This is an area that is growing as more and more or getting an understanding of the essential nature of looking at risks before making decisions. And really risk management starts with Identify your assets, look at your threats and your vulnerabilities,
00:37
and look at the potential for Los Once we understand the potential for loss than our next job is gonna be to find a mitigating strategy that, in a cost effective manner,
00:50
can lessen the amount of risk to the degree that's acceptable by senior management. That's risk management, and that's exactly what security management is. So anybody that wants to know more about risk can take this class also those of you that are in the field of control and assurance, my
01:10
auditors,
01:11
right, we want to understand the risks associated with the organization with the processes. This will help us understand the audit process. What we're trying to do and how to improve the process is within our organization better
01:27
next. Enterprise governance. For those of you at the upper level of senior management, you're the decision makers. Everything flows down from the top. So for those of you that our chief executive officers, information officers, security officers, once again
01:44
shifting our focus to risk management in the enterprise, not just looking at business risks versus I risk,
01:52
but really coming to the point where we understand that I t risks our business risks and risks. And as we govern the enterprise, so must we govern I t.
02:04
As a matter of fact, another course that I Sacha puts out is, ah, the siege, its certification certified in the governance of enterprise I t.
02:13
That's the perfect companion to the sea risk certification for those of you that either are or are looking to move into senior management. Ultimately, at this areas, you know what this area I'm expected to focus on delivering value.
02:29
I'm looking to make sure that the goals of the organization are being met
02:34
and that they're being met correctly in an effective manner and that we're getting the benefits from those mechanisms air from those methods. So anybody that wants to learn more about risk management and honestly, if you want to learn about information security, you need to learn about risk management,
02:52
my auditors, my senior officers. So that probably covers most of you that are investigating this certification exam. This will help you with other certifications, like C I s s pieces, um, project management professional.
03:08
So it's a good course toe add to your repertoire, so to speak,
03:14
and a great certification tohave.
03:15
So let's go ahead and look at the course agenda. This is what we're gonna be covering throughout the course, so we're going to start off with the main zero. We don't want to hit the ground running 60 miles an hour. So we're going to take a little bit of time prior to getting into the sea, risks specific information and just talk a little bit about risk management
03:36
and then particularly information security, risk management.
03:39
So we're gonna talk about some principles, will get some definitions out of the way, talk about the differences between risk, governance and risk management, and then we'll talk about some of those risks that are specific to information security. So that's gonna be domain zero. That'll make sure we're all on a level playing field.
03:59
The sea Risk certification course includes four domains, and each domain is a portion of ice. ACOG's risk I t. Life cycle. So ultimately we start with risk identification. Then we go to risk assessment, risk mitigation
04:16
and then control and monitoring, control, monitoring and reporting.
04:21
So these air phases of the risk life cycle per I sacha. So it's good that we spend a full domain on each of those. And then, of course, we'll wrap up things with an exam review where we'll go over some questions together,
04:38
try to piece through them and figure out how to think like I sack.
04:42
So this will also help you determine it. This is the course for you, and I hope that it iss

Up Next

CRISC

This course on Certified in Risk and Information Systems Control is for IT and business professionals who develop and maintain information system controls, and whose job revolves around security operations and compliance.

Instructed By

Instructor Profile Image
Kelly Handerhan
Senior Instructor