CRISC Certified in Risk and Information Systems Control All-in-One Exam Guide

Description

A fully updated self-study guide for the industry-standard information technology risk certification, CRISC Written by information security risk experts, this complete self-study system is designed to help you prepare for―and pass―ISACA’s CRISC certification exam. CRISC Certified in Risk and Information Systems Control All-in-One Exam Guide, Second Edition features learning objectives, explanations, exam tips, and hundreds of practice questions. Beyond exam prep, this practical guide serves as an ideal on-the-job reference for risk management and IT security professionals. Covers all exam topics, including: IT and cybersecurity governanceEnterprise risk management and risk treatmentIT risk assessments and risk analysisControls and control frameworksThird-party risk managementRisk metrics, KRIs, KCIs, and KPIsEnterprise architectureIT operations managementBusiness impact analysisBusiness continuity and disaster recovery planningData privacy Online content includes: 300 practice exam questionsTest engine that provides full-length practice exams and customizable quizzes by exam topic Cover CRISC®Certified in Risk and Information Systems Control Title Copyright Dedication About the Authors Cotents at a Glance Contents Acknowledgments INTRODUCTION Purpose of This Book How to Use This Book About This Second Edition Becoming a CRISC Professional ISACA Code of Professional Ethics The Certification Exam Preparing for the Exam Applying for CRISC Certification Retaining Your CRISC Certification Revocation of Certification Living the CRISC Lifestyle Summary Chapter 1 Governance Organizational Governance Risk Governance Chapter Review Chapter 2 IT Risk Assessment IT Risk Identification IT Risk Analysis and Evaluation Chapter Review Chapter 3 Risk Response and Reporting Risk Response Control Design and Implementation Risk Monitoring and Reporting Chapter Review Chapter 4 Information Technology and Security Enterprise Architecture IT Operations Management Project Management Business Continuity and Disaster Recovery Management Data Lifecycle Management Systems Development Life Cycle Emerging Technologies Information Security Concepts, Frameworks, and Standards Security and Risk Awareness Training Programs Data Privacy and Data Protection Principles Chapter Review Appendix A Implementing and Managing a Risk Management Program Today’s Risk Landscape What Is a Risk Management Program? The Risk Management Life Cycle Appendix B About the Online Content System Requirements Your Total Seminars Training Hub Account Single User License Terms and Conditions TotalTester Online Technical Support INDEX