Certified in Risk and Information Systems Control (CRISC)

Price
Net €
VAT €

Price
Price on Request

Duration
4 days

For companies and job seekers:
this course is 100% fundable!

Location

Course Language
English

Training Solutions
Online Live

Request a consultation Add to favorites Print as PDF

Risk management and information systems are among the key success factors for modern organizations. This continuing education program combines governance, IT risks, and control mechanisms with current requirements for security, compliance, and data-based decisions.

Key topics

Identification, analysis, and assessment of IT and business risks.
Integration of risk management into business processes.
Controls, governance structures, and compliance requirements.
Interface between IT, management, and strategy.
Integration of modern technologies and AI-supported analyses.

Prerequisite
Basic understanding of IT processes, risk management, or internal control systems.

Target group
Specialists from IT, auditing, risk management, compliance, and related management areas.

The content strengthens analytical thinking, strategic security, and responsible control of digital systems in a dynamic, technology-driven environment.

Print as PDF

Course content

Control

Strategy, goals, and objectives of the organization
Structure, roles, and responsibilities within the organization
Culture of the organization
Policies and standards that apply
Business processes
Assets of the organization

Risk management

Risk management in the company
Three levels of protection in risk management
Risk profile of a company
Readiness and tolerance for risks
Legal, regulatory, and contractual obligations
Professional ethics

IT risks

Events that cause risks (e.g., conditions that lead to damage)
Investigation of threats
Analysis of weaknesses and missing controls (e.g., investigation of causes)
Creation of scenarios

IT risk analysis and assessment

Concepts, standards, and frameworks for risk assessment
Risk registers
Risk analysis methods
Business impact analysis
Inherent and residual risk

Risk responses

Risk management and responses
Define risk and control owners
Risk management for third-party providers
Dealing with problems, findings, and exceptions
Management of new risks

Inspections

Types of controls, standards, and frameworks
Planning, selection, and investigation
Introduction and implementation of controls
Testing and evaluating effectiveness

Risk monitoring and reporting

Data collection, consolidation, and analysis
Monitoring of risks and controls
Reporting techniques (e.g., heat maps, scorecards, dashboards)
Key performance indicators
Key risk indicators (KRIs)
Control indicators (KCIs)

Information technology

Enterprise architecture
IT operations management (e.g., change management, IT resources, incidents)
Project
Disaster recovery management (DRM)
Data lifecycle management
System development lifecycle (SDLC)
New technologies

Information security

Concepts, frameworks, and standards for information security
Training courses to raise awareness of information security
Business continuity management
Data protection and data protection principles

Your training will be 100% funded

Our funding schemes are available exclusively to participants who live or work in Germany. Funding is not available outside Germany.

For career starters, job seekers, career changers, startups, experienced professionals, those looking to advance their careers, specialists, etc.

The QCG program for everyone in the company

Further information

The education voucher for all job seekers

Further information

Frequently asked questions

What is CRISC certification?

CRISC is an internationally recognized certification for IT risk management and information system controls. The focus is on managing, assessing, and monitoring IT risks in companies.

For whom is CRISC particularly relevant?

CRISC is aimed at professionals in IT, governance, risk, compliance, audit, and management who are responsible for digital risks and control systems.

What topics does CRISC cover?

Topics covered include IT risk assessment, risk management, control concepts, governance structures, and the integration of IT risks into business decisions.

What are the benefits of CRISC certification?

CRISC enhances professional credibility, improves career opportunities, and supports the professional handling of IT risks at a strategic level.

What are the requirements for CRISC?

Several years of professional experience in IT risk management or related fields are required. Certification is awarded after passing the exam and providing proof of practical experience.

How widely recognized is CRISC worldwide?

CRISC is globally recognized and particularly sought after by international companies, banks, consulting firms, and regulated industries.

Why is IT risk management so important today?

Digital business models, the cloud, AI, and cyber threats increase risks. Structured IT risk management provides lasting protection for processes, data, and strategic goals.

Do you have any further questions? Please contact us.

Select your nearest center: *

0800 258 258 055

website@newhorizons.de

First Name *

Surname *

Telephone Number *

Postcode *

E-Mail *

I would like to receive funding for further training – I am currently: *

Company Name

Your message

I hereby confirm that I have taken note of the privacy notice. *