Author Description

The updated CRISC Review Manual 2012 is a comprehensive reference guide designed to help individuals prepare for the CRISC exam and understand IT-related business risk management roles and responsibilities. The 2012 edition has been developed by a global team of subject matter experts to assist candidates in understanding essential concepts of the CRISC job practice areas:Risk Identification, Assessment and EvaluationRisk ResponseRisk MonitoringInformation Systems Control Design and ImplementationInformation Systems Control Monitoring and MaintenanceThe CRISC Review Manual 2012 features a unique learning format for focused study and is separated into two distinct parts.Part I provides a thorough overview of the concepts related to the IT-related risk management process and the design, implementation, monitoring and maintenance of information systems (IS) controls. Each chapter contains the definitions and objectives for the five CRISC job practice domains, with the corresponding tasks performed by the risk management professional and the knowledge that is tested on the exam. Part I also includes sample practice questions, explanations of the answers and suggested resources for further study.Part II describes, in detail, selected business and IT processes and how they related to enterprise risk and information systems controls. For each of the selected processes it:Explains the process's importance to achieving business objectivesIntroduces related key conceptsProvides real-life examples of common risksLists selected key risk indicatorsDescribes examples of common IS controls supporting the processFeatures the practitioner's perspectiveOffers suggested reading materials and referencesWhile this manual is an excellent stand-alone document for individual study and can be used as a guide or reference for study groups and chapters conducting local review courses, it can also be used in conjunction with the CRISC Review Questions, Answers & Explanations Manual 2012 Supple