CRISC Cert Prep: 2 IT Risk Assessment

Learn about IT risk assessment, one of the four IT risk management domains, and continue your preparations for the CRISC certification exam.

Introduction

• IT risk assessment

1. Risk Assessment Fundamentals

• Basic risk assessment techniques
• Digging deeper
• Risk analysis methodologies
• Determine risk rankings
• Develop IT risk scenarios
• Perform threat modeling

2. Criteria-Based Analysis

• Analyze organizational structure
• Analyze policies, standards, and procedures
• Analyze technology
• Analyze architecture
• Analyze controls

3. Control Effectiveness

• Review historical data
• Leverage assessments
• Incorporate external information
• Perform a gap analysis
• Evaluate control effectiveness

4. Assessment Results

• Review risks
• Communicate risk assessment results
• Update the risk register

Conclusion

• Next steps