All Episodes
Certified: The CRISC Audio Course — 94 episodes
Welcome to the ISACA CRISC
Episode 93: Evaluating Business Practices Alignment with Risk Management and Security Frameworks
Episode 92: Reporting Control Information and Supporting Risk-Based Decisions
Episode 91: Reporting Risk Information to Stakeholders
Episode 90: Reviewing Control Assessments for Effectiveness and Maturity
Episode 89: Monitoring and Analyzing KPIs and KCIs
Episode 88: Collaborating with Control Owners on KPIs and KCIs Identification
Episode 87: Monitoring and Analyzing Key Risk Indicators (KRIs)
Episode 86: Defining and Establishing Key Risk Indicators (KRIs)
Episode 85: Validating Execution of Risk Responses Against Risk Treatment Plans
Episode 84: Collaborating with Control Owners: Control Implementation and Maintenance
Episode 83: Collaborating with Control Owners: Control Selection and Design
Episode 82: Collaborating with Risk Owners: Developing Risk Treatment Plans
Episode 81: Facilitating Stakeholder Selection of Recommended Risk Responses
Episode 80: Reviewing Risk and Control Analysis for Gaps Assessment
Episode 79: Identifying and Evaluating Effectiveness of Existing Controls
Episode 78: Conducting a Comprehensive IT Risk Assessment
Episode 77: Promoting a Risk-Aware Culture through Security Awareness Training
Episode 76: Facilitating Identification of Risk Appetite and Tolerance
Episode 75: Establishing and Maintaining the IT Risk Register
Episode 74: Establishing Accountability Through Risk and Control Ownership
Episode 73: Evaluating Threats, Vulnerabilities, and Risks to Develop IT Risk Scenarios
Episode 72: Identifying Threats and Vulnerabilities to People, Processes, and Technology
Episode 71: Identifying Potential or Realized Impacts of IT Risk
Episode 70: Collecting and Reviewing Organization’s Business and IT Information
Episode 69: Domain 4 Review: Key Takeaways and Exam Tips
Episode 68: Data Privacy and Protection Principles
Episode 67: Business Continuity Management Concepts and Practices
Episode 66: Information Security Awareness Training
Episode 65: Information Security Concepts, Frameworks, and Standards
Episode 64: Emerging Technologies and Associated Risks
Episode 63: System Development Life Cycle (SDLC) Essentials
Episode 62: Data Lifecycle Management Principles
Episode 61: Disaster Recovery Management (DRM)
Episode 60: Project Management in the IT Environment
Episode 59: IT Operations: Problem and Incident Management
Episode 58: IT Operations: Change and Asset Management
Episode 57: Enterprise Architecture Principles
Episode 56: CRISC Domain 4 Overview: Information Technology and Security Alignment
Episode 55: Domain 3 Review: Key Takeaways and Exam Tips
Episode 54: Defining and Utilizing Key Risk Indicators (KRIs) and Key Control Indicators (KCIs)
Episode 53: Understanding Key Performance Indicators (KPIs)
Episode 52: Risk and Control Reporting Techniques: Heatmaps, Scorecards, and Dashboards
Episode 51: Techniques for Control Monitoring and Continuous Improvement
Episode 50: Techniques for Risk Monitoring and Validation
Episode 49: Data Collection, Aggregation, Analysis, and Validation
Episode 48: Developing and Executing Risk Treatment Plans
Episode 47: Control Testing and Effectiveness Evaluation
Episode 46: Control Implementation Best Practices
Episode 45: Control Design, Selection, and Analysis
Episode 44: Control Types, Standards, and Frameworks
Episode 43: Managing Emerging Risks
Episode 42: Issue, Finding, and Exception Management
Episode 41: Managing and Monitoring Third-Party Risks
Episode 40: Third-Party Risk Identification and Evaluation
Episode 39: Assigning Risk and Control Ownership
Episode 38: Implementing and Documenting Risk Response Decisions
Episode 37: Understanding Risk Treatment Options (Accept, Mitigate, Transfer, Avoid)
Episode 36: CRISC Domain 3 Overview: Risk Response and Reporting Essentials
Episode 35: Domain 2 Review: Key Takeaways and Exam Tips
Episode 34: Inherent Risk vs. Residual Risk
Episode 33: Conducting Business Impact Analysis (BIA)
Episode 32: Risk Analysis Methodologies and Tools
Episode 31: The IT Risk Register: Creation and Management
Episode 30: Risk Assessment Concepts, Standards, and Frameworks
Episode 29: Risk Scenario Development
Episode 28: Vulnerability and Control Deficiency Analysis (Root Cause Analysis)
Episode 27: Threat Modelling and the Threat Landscape
Episode 26: Analyzing Loss Results and Business Impacts of Risk Events
Episode 25: Risk Events: Identification and Contributing Conditions
Episode 24: CRISC Domain 2 Overview: Understanding IT Risk Assessment
Episode 23: Domain 1 Review: Key Takeaways and Exam Tips
Episode 22: Professional Ethics of Risk Management
Episode 21: Legal, Regulatory, and Contractual Requirements
Episode 20: Risk Appetite and Risk Tolerance: Definitions and Applications
Episode 19: Risk Profile: Development and Maintenance
Episode 18: Three Lines of Defense Model
Episode 17: Enterprise Risk Management and Risk Management Framework
Episode 16: Organizational Assets
Episode 15: Business Processes
Episode 14: Policies and Standards
Episode 13: Organizational Culture
Episode 12: Organizational Structure, Roles, and Responsibilities
Episode 11: Organizational Strategy, Goals, and Objectives
Episode 10: CRISC Domain 1 Overview: Governance Fundamentals and Framework
Episode 9: Final CRISC Exam Readiness and Last-Minute Preparation Tips
Episode 8: Final CRISC Comprehensive Review – Domains 3 & 4
Episode 7: Final CRISC Comprehensive Review – Domains 1 & 2
Episode 6: Exam-Day Preparation: What to Expect and How to Prepare Mentally
Episode 5: Final Review: Summary of Key Concepts Across All CRISC Domains
Episode 4: Critical Exam Tips, Test-taking Strategies, and Common Pitfalls
Episode 3: Proven Strategies for Passing the CRISC Exam on Your First Attempt
Episode 2: Understanding ISACA and Key Resources for CRISC Exam Preparation
Episode 1: Welcome to the CRISC Certification: Exam Overview, Benefits, and Career Opportunities