Author Description

The CRISC Review Manual 2013 is a comprehensice reference guide designed to help individuals prepare for the CRISC exam and understand IT-related business risk management roles and responsibilities. the manual has been enhanced over the past editions and represents the most current, comprehensive, peer-reviewed IT-related business risk management resource available worldwide.The 2013 manual is organized to assist candidates in understanding essential concepts and studying the following job practice areas:Risk Identification, Assessment and EvaluationRisk ResponseRisk MonitoringInformation Systems Control Design and Implementationinformation Systems Control Monitoring and MaintenanceThe CRISC Review Manual 2013 features a unique learning format for focused study and is separated into two distinct parts.Part l provides a thorough overview of the concepts related to the IT-related risk management process and the design, implementation, monitoring and maintenance of Information Systems (IS) controls. Each chapter contains the definitions and objectives for the five CRISC job practice domains, with the corresponding tasks performed by the risk practitioner and the knowledge that is tested on the exam. Part l also includes sample practice questions, explanations of the answers and suggested resources for further study.Part ll describes, in detail, selected business and IT processes and how they related to enterprise risk and information systems controls. For each of the selected processes it:Explains the process's importance to achieving business objectivesIntroduces related key terms and conceptsProvides real-life examples of common risksLists selected key risk indicatorsDescribes examples of common IS controls supporting the processFeatures the practitioner's perspectiveOffers suggested reading materials and referencesWhile this manual is an excellent stand-alone document for individual study and can be used as a guide or reference for study groups and chapters conducti