# CRISC > Join Edoxi’s 25-hour online CRISC course. Get expert training in IT risk, governance, COBIT & NIST frameworks. Build skills to easily clear the CRISC exam. ## Course Details - Rating: 4.9/5 (200 reviews) - Category: Cyber Security - Sub-Category: Security Governance ## Course Introduction Edoxi’s 25-hour online CRISC training focuses on building skills in IT risk management and information systems control. Develop strategic skills in risk assessment, mitigation, and business continuity planning. Helps you prepare you for the ISACA’s CRISC certification exam. Gain practical experience with COBIT, NIST, and ISO 27001 through flexible, expert-led training and real-world projects. Enrol now to advance your career in risk and IS control. ## Course Overview - Delivery Modes: Online - Course Duration: 25 Hours - Corporate Days: 4 Days - Learners Enrolled: 100+ - Modules: 4 ## About This Course ## About Our Online CRISC Certification Course Edoxi’s 25-hour online CRISC (Certified in Risk and Information Systems Control) training builds advanced skills in IT risk management, governance, and compliance. Our CRISC course builds your practical IT risk expertise with frameworks like COBIT, NIST, and ISO 27001. Ideal for anyone looking to build skills in IT risk management, systems control, compliance, and cybersecurity. You can equip yourself to lead enterprise risk and IS control with confidence. Led by experienced industry experts, the training combines interactive workshops, real-world case studies, and hands-on simulations using leading GRC platforms and SIEM tools. You will gain skills in risk mitigation, continuity planning, and compliance to defend against cyber threats and meet global standards. Without interfering with their schedules, busy professionals can progress their careers with our flexible delivery options. We also offer customised corporate training to meet your organisation’s specific risk management needs. Upon successful completion, you will receive a CRISC certification from Edoxi that validates your skills. With that, you can prepare yourself for the globally recognized CRISC credential by ISACA. Enrol now to build in-demand capabilities that position you as a strategic leader in IT risk governance and help your organization stay secure, resilient, and compliant. CRISC Exam Details The CRISC certification is globally recognized and affirms your expertise in IT risk management and governance. To earn the certification, you must pass the CRISC exam and meet ISACA’s required professional experience. Here are the key exam details: Exam Criteria Details Exam Name Certified in Risk and Information Systems Control (CRISC) Duration 4 hours Questions 150 multiple-choice questions Passing Score 450 out of 800 Exam Fees ISACA Members: US$575.00 Non-Members: US$760.00 Validity 3 years Read More ## Key Features of Edoxi's CRISC Training **Advanced IT Risk Identification & Assessment** Learn to assess IT risks with ISACA frameworks and standards like COBIT, NIST, and ISO 27001. Master proven methods to strengthen your organization’s risk management. **Strategic Risk Response & Mitigation Planning** Develop structured approaches to mitigate risks using controls, transfer mechanisms, and detailed plans. Align strategies with business goals to ensure maximum resilience. **Governance, Risk, and Compliance (GRC) Framework Implementation** Gain expertise in implementing robust GRC frameworks to boost enterprise resilience. Ensure regulatory compliance while strengthening stakeholder trust. **IT Control Architecture & Security Implementation** Learn to design, implement, and monitor IT control mechanisms that protect critical business assets. Support business continuity with well-structured security controls. **Proactive Risk Monitoring & Executive-Level Reporting** Establish effective Key Risk Indicators (KRIs) and performance metrics. Continuously assess control effectiveness and provide insightful risk reports to executive leadership. **Business Continuity & Disaster Recovery Strategies** Develop enterprise-level resilience with robust business continuity and disaster recovery plans. Implement effective incident response, business impact analysis, and recovery strategies. ## CRISC Course Modules ### Module 1: Governance **Chapter 1.1: Organisational Governance** - Lesson 1.1.1: Organisational Strategy, Goals, and Objectives - Lesson 1.1.2: Organisational Structure, Roles and Responsibilities - Lesson 1.1.3: Organisational Culture - Lesson 1.1.4: Policies and Standards - Lesson 1.1.5: Business Processes - Lesson 1.1.6: Organizational Assets **Chapter 1.2: Risk Governance** - Lesson 1.2.1: Enterprise Risk Management and Risk Management Framework - Lesson 1.2.2: Three Lines of Defence - Lesson 1.2.3: Risk Profile - Lesson 1.2.4: Risk Appetite and Risk Tolerance - Lesson 1.2.5: Legal, Regulatory and Contractual Requirements - Lesson 1.2.6: Professional Ethics of Risk Management ### Module 2: IT Risk Assessment **Chapter 2.1: IT Risk Identification** - Lesson 2.1.1: Risk Events (e.g., contributing conditions, loss result) - Lesson 2.1.2: Threat Modelling and Threat Landscape - Lesson 2.1.3: Vulnerability and Control Deficiency Analysis (e.g., root cause analysis) - Lesson 2.1.4: Risk Scenario Development **Chapter 2.2: IT Risk Analysis and Evaluation** - Lesson 2.2.1: Risk Assessment Concepts, Standards and Frameworks - Lesson 2.2.2: Risk Register - Lesson 2.2.3: Risk Analysis Methodologies - Lesson 2.2.4: Business Impact Analysis - Lesson 2.2.5: Inherent and Residual Risk ### Module 3: Risk Response and Reporting **Chapter 3.1: Risk Response** - Lesson 3.1.1: Risk Treatment / Risk Response Options - Lesson 3.1.2: Risk and Control Ownership - Lesson 3.1.3: Third-Party Risk Management - Lesson 3.1.4: Issue, Finding and Exception Management - Lesson 3.1.5: Management of Emerging Risk **Chapter 3.2: Control Design and Implementation** - Lesson 3.2.1: Control Types, Standards and Frameworks - Lesson 3.2.2: Control Design, Selection and Analysis - Lesson 3.2.3: Control Implementation - Lesson 3.2.4: Control Testing and Effectiveness Evaluation ### Module 4: Information Technology and Security **Chapter 4.1: Information Technology Principles** - Lesson 4.1.1: Enterprise Architecture - Lesson 4.1.2: IT Operations Management (e.g., change management, IT assets, problems, incidents) - Lesson 4.1.3: Project Management - Lesson 4.1.4: Disaster Recovery Management (DRM) - Lesson 4.1.5: Data Lifecycle Management - Lesson 4.1.6: System Development Life Cycle (SDLC) - Lesson 4.1.7: Emerging Technologies **Chapter 4.2: Information Security Principles** - Lesson 4.2.1: Information Security Concepts, Frameworks and Standards - Lesson 4.2.2: Information Security Awareness Training - Lesson 4.2.3: Business Continuity Management - Lesson 4.2.4: Data Privacy and Data Protection Principles ## Hands-On Lab Activities **Enterprise IT Risk Assessment Simulations** Identify, evaluate, and mitigate IT risks using industry frameworks. Analyze enterprise scenarios and develop risk management strategies. **Cybersecurity Incident Response & Threat Containment** Execute incident response plans using SIEM tools like Splunk and QRadar. Enhance threat detection, investigation, and mitigation skills. **Regulatory Compliance & Governance Audit Exercises** Conduct governance audits using GRC platforms. Assess regulatory compliance, risk controls, and policy enforcement in enterprise environments. **Strategic Risk Analysis & Mitigation Frameworks** Collaborate on industry risk analysis projects. Utilise RSA Archer and ServiceNow GRC to develop risk governance strategies. ## CRISC Course Outcome and Career Opportunities Edoxi’s CRISC certification prepares you to align IT risk with enterprise goals, implement effective control measures, and ensure compliance with global standards. The key outcomes of the course include: - Gain mastery in identifying, assessing, and managing IT risks using industry-leading frameworks such as COBIT, NIST, and ISO 27001.​ - Develop the ability to design and implement enterprise-wide risk response strategies and effective control mechanisms. - Acquire skills to integrate IT risk governance with business objectives while ensuring compliance with global regulatory standards. - Build expertise in business continuity planning and disaster recovery to enhance organizational resilience. - Learn to leverage GRC platforms and SIEM tools for continuous risk monitoring, threat intelligence, and executive-level reporting. - Position yourself for advanced career opportunities in IT risk management, regulatory compliance, and information security governance across multiple industries. ## Job Roles After Completing the CRISC Training IT Risk Analyst, Information Security Analyst, Compliance Analyst, IT Risk Manager, Director of Risk Management, Risk Officer ## CRISC Course Training Options **Live Online Training** - 24 hours of online CRISC training course - Interactive virtual sessions with real-time risk management exercises - Access to industry-standard risk assessment tools and governance frameworks - Remote participation in hands-on simulations and compliance audits - Flexible scheduling designed for working professionals **Corporate Training** - Customizable 4-day intensive program tailored to enterprise needs - Small group learning for personalized and focused training - Industry-specific case studies aligned with business risk challenges - Fly Me A Trainer option for tailored on-site training - Training delivered at a selected hotel, client premises, or Edoxi - On-site training options for seamless team integration ## How to Get Your CRISC Certification? Here’s a four-step guide to becoming a certified CRISC professional. 1. Join Edoxi’s CRISC Certification Course. 2. Attend our Expert-led CRISC Training. 3. Complete the CRISC course. 4. Earn your CRISC course completion certificate. ## Why Choose Edoxi for the CRISC Course? Among the various available possibilities, Edoxi stands out as the top choice. The following are the reasons why Edoxi's CRISC training is the best option for you: **Industry-Experienced Trainers in IT Risk Management** Learn from expert instructors with deep experience in IT risk, governance, and compliance. They combine theory with real-world insights for practical, career-driven learning. **Real-World Risk Assessment & Compliance Simulations** Gain hands-on experience through enterprise risk simulations and mock audits. Master threat identification, control implementation, and compliance using frameworks like COBIT, NIST, and ISO 27001. **Exclusive Access to Official ISACA Learning Resources** Prepare effectively with ISACA’s official guides, Q&A resources, and exam tools. This is fully aligned with the latest CRISC requirements to ensure exam success. **Personalized Training with Small Class Sizes** Benefit from a low student-to-trainer ratio for interactive, focused learning. Tailored instruction simplifies complex risk concepts for better retention and real-world application. **Flexible Learning Formats for Busy Professionals** Balance your professional commitments with our adaptable learning options. Choose between classroom-based training and live online sessions to pursue certification at your convenience. ## Frequently Asked Questions **Q: What is the format of the CRISC exam, and how difficult is it?** A: The CRISC exam consists of 150 multiple-choice questions covering risk identification, assessment, mitigation, and governance. It requires a strong understanding of IT risk management frameworks and real-world applications. **Q: What is the CRISC certification, and why is it valuable?** A: CRISC is a globally recognized ISACA certification that validates your expertise in IT risk management and governance. It proves your ability to manage risks through effective information systems controls. **Q: What is the average salary of a CRISC-certified professional?** A: The average salary for CRISC-certified professionals typically ranges from $133,000 to $150,000 per year.​ Salaries vary depending on job role, experience, and location, with senior positions like Chief Information Security Officer earning up to around $191,000 annually. **Q: Who should pursue the CRISC certification?** A: The CRISC certification is ideal for IT risk managers, auditors, and GRC professionals looking to lead enterprise risk initiatives and align IT risk with business goals. **Q: What are the key details of the CRISC exam?** A: The CRISC exam consists of 150 multiple-choice questions to be completed in 4 hours. The passing score is 450 out of 800. The exam fee is US$575 for ISACA members and US$760 for non-members. The certification is valid for 3 years, subject to continuing education and renewal requirements. ## Who Can Join Our CRISC Training Course? **Enterprise IT Risk Managers** Professionals responsible for developing and implementing risk frameworks to mitigate IT threats, ensuring business continuity and regulatory compliance. **Cybersecurity & Compliance Officers** Experts overseeing security policies, enforcing regulatory mandates, and aligning governance frameworks with enterprise risk management strategies. **IT Auditors & Governance Specialists** Professionals conducting in-depth risk assessments, compliance audits, and IT governance reviews to enhance security resilience. **Cyber Risk & Advisory Consultants** Strategic advisors formulating risk management policies, threat mitigation strategies, and security frameworks for enterprise IT environments. **Business Resilience & Disaster Recovery Experts** Specialists designing and executing disaster recovery and crisis management strategies to safeguard critical IT infrastructure. **IT Governance & Regulatory Compliance Analysts** Professionals ensuring IT operations align with business objectives while maintaining adherence to evolving security regulations. ## What Do You Learn from Edoxi's CRISC Training **IT Risk Identification & Assessment Frameworks** Master advanced methodologies to identify, analyze, and quantify IT risks using industry-leading frameworks such as COBIT, NIST, and ISO 27001. **Strategic Risk Mitigation & Control Implementation** Build expertise in designing effective risk response strategies. Implement strong security controls and establish proactive risk monitoring to safeguard systems and detect threats early. **Enterprise Security Governance & Compliance Alignment** Learn to integrate cybersecurity governance with business objectives while ensuring adherence to global regulatory requirements and industry best practices. **Business Continuity & Resilience Planning** Gain proficiency in conducting impact assessments and formulating risk-based recovery strategies. Deploy disaster recovery frameworks to strengthen organizational resilience. **Advanced Risk Monitoring & Threat Intelligence** Leverage GRC platforms and SIEM tools to establish continuous risk monitoring, enhance threat detection, and streamline compliance reporting. **Regulatory Compliance & Control Framework Integration** Understand how to implement multi-layered security controls. Ensure compliance with evolving data privacy laws, cybersecurity mandates, and industry regulations. ## Trainer - Name: Maria Mehwish - Designation: Leading Cybersecurity & Cloud Security Trainer Maria Mehwish is a forward-thinking and knowledgeable information security leader with a strong background in building, updating, and maintaining digital protections for various organisations. As a certified CEH, CCSP, CCT, and CISSP Trainer, Maria has a proven track record of delivering innovative and immersive coursework, enhancing learning experiences for cyber threats, ethical hacking, security policy, DevSecOps, and cloud security. With excellent verbal and written communication skills, she is also adept at troubleshooting problems and building successful solutions. Maria is a self-motivated individual with a strong sense of personal responsibility, capable of managing projects from start to finish. Her expertise in Amazon Web Services, Java/Go/Python/C++, DevSecOps, computer security, Linux, penetration testing, and risk analysis, among others, makes her a valuable asset to any organisation. Maria, a British national, is a native English speaker and has intermediate proficiency in Urdu. ## Enrol in This Course - Course URL: https://www.edoxi.com/crisc-course - Phone: +971 43801666 - Email: info@edoxi.com