Author Description

The new CRISC Review Manual 2011 is a comprehensive reference guide designed to help individuals prepare for the CRISC exam and understand IT-related business risk management roles and responsibilities. The 2011 edition has been developed by global subject matter experts to assist candidates in understanding essential concepts of the CRISC job practice areas: Risk identification, assessment and evaluation Risk response Risk monitoring IS control design and implementation IS control monitoring and maintenance The CRISC Review Manual 2011 features a unique learning format for focused study and is separated into two distinct parts. Part I provides a thorough overview of the concepts related to the IT-related risk management process and the design, implementation, monitoring and maintenance of information systems (IS) controls. Each chapter contains the definitions and objectives for the five CRISC job practice domains, with the corresponding tasks performed by the risk management professional and the knowledge that is tested on the exam. Part I also includes sample practice questions, explanations of the answers and suggested resources for further study. Part II describes, in detail, selected business and IT processes and how they are related to enterprise risk. For each of the selected processes it: Explains the process's importance to achieving business objectives Introduces related key concepts Provides real-life examples of common risks Lists selected key risk indicators Describes examples of common IS controls supporting the process Features the practitioner's perspective Offers suggested reading materials and references This manual is an excellent stand-alone document for individual study and can be used as a guide or reference for study groups and chapters conducting local review courses.