An all-new exam guide for the industry-standard information technology risk certification, Certified in Risk and Information Systems Control (CRISC)

Prepare for the updated Certified in Risk and Information Systems Control (CRISC) certification exam with this comprehensive exam guide. CRISC Certified in Risk and Information Systems Control All-in-One Exam Guide covers all four exam domains effective as of June 2015 and contains hundreds of realistic practice exam questions.

Fulfilling the promise of the All-in-One series, this reference guide serves as a test preparation tool AND an on-the-job reference that will serve you well beyond the examination. To aid in self-study, each chapter includes Exam Tips that highlight key information about the exam, chapter summaries that reinforce the chapter's salient points, and end-of-chapter questions that are accurate to the content and question format of the real exam.

• 100% coverage of the CRISC certification job practice areas effective as of June 2015
• Includes hands-on exercises for additional practice and Notes, Tips, and Cautions which provide real-world insights
• CD-ROM features two full-length, customizable practice exams in the Total Tester exam engine and a PDF eBook

1 Risk Concepts
2 Threats and Vulnerabilities in the Enterprise
3 Identifying and Managing Risk Scenarios
4 Risk Assessment and Analysis
5 Risk Response and Mitigation
6 Control and Risk Monitoring
7 Information Systems Control Concepts
8 Designing Information Systems Controls
9 Implementing Information Systems Controls
10 Measuring Risk and Control Effectiveness
Glossary
Appendix A The NIST Risk Management Framework
Appendix B The ISACA Risk IT Framework