ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide: A primer on GRC and an exam guide for the most recent and rigorous IT risk certification

by Shobhit Mehta, Vikas Yadav (Foreword by)

Overview

For beginners and experienced IT risk professionals alike, acing the ISACA CRISC exam is no mean feat, and the application of this advanced skillset in your daily work poses a challenge. The ISACA Certified in Risk and Information Systems Control (CRISC®) Certification Guide is a comprehensive guide to CRISC certification and beyond that’ll help you to approach these daunting challenges with its step-by-step coverage of all aspects of the exam content and develop a highly sought-after skillset in the process.
This book is divided into six sections, with each section equipped with everything you need to get to grips with the domains covered in the exam. There’ll be no surprises on exam day – from GRC to ethical risk management, third-party security concerns to the ins and outs of control design, and IDS/IPS to the SDLC, no stone is left unturned in this book’s systematic design covering all the topics so that you can sit for the exam with confidence. What’s more, there are chapter-end self-assessment questions for you to test all that you’ve learned, as well as two book-end practice quizzes to really give you a leg up.
By the end of this CRISC exam study guide, you’ll not just have what it takes to breeze through the certification process, but will also be equipped with an invaluable resource to accompany you on your career path.

Product Details

ISBN-13:	9781803247564
Publisher:	Packt Publishing
Publication date:	09/08/2023
Sold by:	Barnes & Noble
Format:	eBook
Pages:	316
File size:	5 MB

About the Author

Shobhit Mehta is the Security and Compliance Director at Headspace, an on-demand mental health company in San Francisco, CA. Previously, he worked in different facets of security and assurance with HSBC, Deutsche Bank, Credit Suisse, PayPal, and Fidelity Investments. He also works with ISACA to develop exam questions for CISA, CISM, and CGEIT, served as the technical reviewer for the CGEIT and CISA review manuals, and is a published author for the COBIT 5 journal. He completed his MS in cybersecurity at Northeastern University, Boston, and holds CRISC, CISM, CISA, CGEIT, CISSP, and CCSP certifications. In his spare time, he likes to explore the inclined trails of the Bay Area, complete ultramarathons, and blog on GRCMusings.

Table of Contents

Table of Contents

1. Governance, Risk, and Compliance
2. CRISC Practice Areas and the ISACA Mindset
3. Organizational Governance, Policies, and Risk Management
4. The Three Lines of Defense and Cybersecurity
5. Legal Requirements and the Ethics of Risk Management
6. Risk Management Life Cycle
7. Threat, Vulnerability, and Risk
8. Risk Assessment Concepts, Standards, and Frameworks
9. Business Impact Analysis, and Inherent and Residual Risk
10. Risk Response and Control Ownership
11. Third-Party Risk Management
12. Control Design and Implementation
13. Log Aggregation, Risk and Control Monitoring, and Reporting
14. Enterprise Architecture and Information Technology
15. Enterprise Resiliency and Data Life Cycle Management
16. The System Development Life Cycle and Emerging Technologies
17. Information Security and Privacy Principles
18. Practice Quiz - Part 1
19. Practice Quiz - Part 2