The CRISC training prepares you strategically for the unique challenges of IT and enterprise risk management. You will learn everything about identifying and managing (business) risks through the development, implementation, and maintenance of controls appropriate to the information systems (IS) in an organization.
This training enables you to assess IT risks based on their threat to the organization, valuable or sensitive data, and the objectives pursued. You will then learn to create plans to mitigate these risks and avoid them where possible. In doing so, you will take into account conditions related to governance and compliance, efficiency, and the continuity of performance.
In preparation for the CRISC training, you will receive the official ISACA study material upon registration and one year of access to the accompanying MyTSTC learning platform. By doing a short self-study before the training, you will enter the classroom training better prepared and can ask more targeted questions to the experienced instructor based on the material covered. The result is a more interactive course with greater depth on the heavier topics and less variation in levels among participants.
Our CRISC training is classroom-based but can also be attended Live Online if desired. You will then follow the training live remotely with our own instructor, view the slides and notes on the whiteboard, and can ask questions to both the trainer and your fellow participants. Essentially, it is just like being present in the classroom training, but from your own location. If the Live Online training does not meet your expectations, you may attend the classroom training again free of charge within a year.
We deviate from the regular CRISC training by starting with a short, guided self-study period after registration. For this, you will receive the CRISC Review Manual by post and gain access to our exclusive MyTSTC learning platform prior to the classroom days. On the platform, you will take a short assessment test after which you will receive tailored material (including videos) based on your answers to prepare you for the intensive training. Furthermore, you will already read a limited number of pages from the Review Manual. With this approach, we reduce differences in levels among participants and spread the necessary self-study over a part before and after the training.
We advise you to practice with the included test questions from the ISACA CRISC Questions, Answers & Explanations database after the training before participating in the exam to get accustomed to the typical ISACA question format. If you need further guidance, you will receive it through MyTSTC. Finally, it is possible to attend the training again free of charge within a year (not applicable for in-company training). For example, if you unexpectedly fail, but also if you wish for extra help towards the exam.
This training is classroom-based but can also be attended Live Online if desired. You will then follow the training live remotely with our own instructor, view the slides and notes on the whiteboard, and can ask questions to both the trainer and your fellow participants. Essentially, it’s just like being present in the classroom training, but from your own location.
De CRISC training en het examen bestaan uit onderstaande vier ‘job practice area’s’. ISACA toetst de invulling ervan continu aan de actualiteit zodat de training aan blijft sluiten op het hedendaagse profiel van de Risk Professional:
Organizational Governance A
Organizational Strategy, Goals and Objectives
Organizational Structure, Roles and Responsibilities
Organizational Culture
Policies and Standards
Business Processes
Organizational Assets
Risk Governance B
Enterprise Risk Management and Risk Management Framework
Three Lines of Defense
Risk Profile
Risk Appetite and Risk Tolerance
Legal, Regulatory and Contractual Requirements
Professional Ethics of Risk Management
IT Risk Identification A
Risk Events (e.g., contributing conditions, loss result)
Threat Modelling and Threat Landscape
Vulnerability and Control Deficiency Analysis (e.g., root cause analysis)
Risk Scenario Development
IT Risk Analysis and Evaluation B
Risk Assessment Concepts, Standards, and Frameworks
Risk Register
Risk Analysis Methodologies
Business Impact Analysis
Inherent and Residual Risk
Risk Response A
Risk Treatment / Risk Response Options
Risk and Control Ownership
Third-Party Risk Management
Issue, Finding and Exception Management
Management of Emerging Risk
Control Design and Implementation B
Control Types, Standards and Frameworks
Control Design, Selection and Analysis
Control Implementation
Control Testing and Effectiveness Evaluation
Risk Monitoring and Reporting C
Risk Treatment Plans
Data Collection, Aggregation, Analysis and Validation
Risk and Control Monitoring Techniques
Risk and Control Reporting Techniques (heatmap, scorecards, dashboards)
Key Performance Indicators
Key Risk Indicators (KRIs)
Key Control Indicators (KCIs)
Information Technology Principles A
Enterprise Architecture
IT Operations Management (e.g. change management, IT assets, problems, incidents)
Project Management
Disaster Recovery Management (DRM)
Data Lifecycle Management
System Development Life Cycle (SDLC)
Emerging Technologies
Information Security Principles B
Information Security Concepts, Frameworks and Standards
Information Security Awareness Training
Business Continuity Management
Data Privacy and Data Protection Principles
The CRISC training prepares you strategically for the unique challenges of IT and enterprise risk management. You will learn everything about identifying and managing (business) risks through the development, implementation, and maintenance of controls appropriate to the information systems (IS) in an organization.
This training enables you to assess IT risks based on their threat to the organization, valuable or sensitive data, and the objectives pursued. You will then learn to create plans to mitigate these risks and avoid them where possible. In doing so, you will take into account conditions related to governance and compliance, efficiency, and the continuity of performance.
In preparation for the CRISC training, you will receive the official ISACA study material upon registration and one year of access to the accompanying MyTSTC learning platform. By doing a short self-study before the training, you will enter the classroom training better prepared and can ask more targeted questions to the experienced instructor based on the material covered. The result is a more interactive course with greater depth on the heavier topics and less variation in levels among participants.
Our CRISC training is classroom-based but can also be attended Live Online if desired. You will then follow the training live remotely with our own instructor, view the slides and notes on the whiteboard, and can ask questions to both the trainer and your fellow participants. Essentially, it is just like being present in the classroom training, but from your own location. If the Live Online training does not meet your expectations, you may attend the classroom training again free of charge within a year.
We deviate from the regular CRISC training by starting with a short, guided self-study period after registration. For this, you will receive the CRISC Review Manual by post and gain access to our exclusive MyTSTC learning platform prior to the classroom days. On the platform, you will take a short assessment test after which you will receive tailored material (including videos) based on your answers to prepare you for the intensive training. Furthermore, you will already read a limited number of pages from the Review Manual. With this approach, we reduce differences in levels among participants and spread the necessary self-study over a part before and after the training.
We advise you to practice with the included test questions from the ISACA CRISC Questions, Answers & Explanations database after the training before participating in the exam to get accustomed to the typical ISACA question format. If you need further guidance, you will receive it through MyTSTC. Finally, it is possible to attend the training again free of charge within a year (not applicable for in-company training). For example, if you unexpectedly fail, but also if you wish for extra help towards the exam.
This training is classroom-based but can also be attended Live Online if desired. You will then follow the training live remotely with our own instructor, view the slides and notes on the whiteboard, and can ask questions to both the trainer and your fellow participants. Essentially, it’s just like being present in the classroom training, but from your own location.
De CRISC training en het examen bestaan uit onderstaande vier ‘job practice area’s’. ISACA toetst de invulling ervan continu aan de actualiteit zodat de training aan blijft sluiten op het hedendaagse profiel van de Risk Professional:
Organizational Governance A
Organizational Strategy, Goals and Objectives
Organizational Structure, Roles and Responsibilities
Organizational Culture
Policies and Standards
Business Processes
Organizational Assets
Risk Governance B
Enterprise Risk Management and Risk Management Framework
Three Lines of Defense
Risk Profile
Risk Appetite and Risk Tolerance
Legal, Regulatory and Contractual Requirements
Professional Ethics of Risk Management
IT Risk Identification A
Risk Events (e.g., contributing conditions, loss result)
Threat Modelling and Threat Landscape
Vulnerability and Control Deficiency Analysis (e.g., root cause analysis)
Risk Scenario Development
IT Risk Analysis and Evaluation B
Risk Assessment Concepts, Standards, and Frameworks
Risk Register
Risk Analysis Methodologies
Business Impact Analysis
Inherent and Residual Risk
Risk Response A
Risk Treatment / Risk Response Options
Risk and Control Ownership
Third-Party Risk Management
Issue, Finding and Exception Management
Management of Emerging Risk
Control Design and Implementation B
Control Types, Standards and Frameworks
Control Design, Selection and Analysis
Control Implementation
Control Testing and Effectiveness Evaluation
Risk Monitoring and Reporting C
Risk Treatment Plans
Data Collection, Aggregation, Analysis and Validation
Risk and Control Monitoring Techniques
Risk and Control Reporting Techniques (heatmap, scorecards, dashboards)
Key Performance Indicators
Key Risk Indicators (KRIs)
Key Control Indicators (KCIs)
Information Technology Principles A
Enterprise Architecture
IT Operations Management (e.g. change management, IT assets, problems, incidents)
Project Management
Disaster Recovery Management (DRM)
Data Lifecycle Management
System Development Life Cycle (SDLC)
Emerging Technologies
Information Security Principles B
Information Security Concepts, Frameworks and Standards
Information Security Awareness Training
Business Continuity Management
Data Privacy and Data Protection Principles
This training is scheduled as follows in the coming period. Missing a date? Feel free to contact us.
Location: TSTC Veenendaal - Klassikaal & Live Online
Location: TSTC Veenendaal - Klassikaal & Live Online
This training can also be taken as part of the below learning path(s). If you want to follow multiple titles from a learning path, please contact our advisors for a suitable bundle offer.
Train smarter, not harder. TSTC's unique approach guarantees the effective acquisition of skills and the greatest chance of success.
Learn more about TSTC