A fully updated self-study guide for the industry-standard information technology risk certification, CRISCWritten by information security risk experts, this complete self-study system is designed to help you prepare for--and pass--ISACA's CRISC certification exam. CRISC Certified in Risk and Information Systems Control All-in-One Exam Guide, Second Edition features learning objectives, explanations, exam tips, and hundreds of practice questions. Beyond exam prep, this practical guide serves as an ideal on-the-job reference for risk management and IT security professionals.Covers all exam topics, including: IT and cybersecurity governanceEnterprise risk management and risk treatmentIT risk assessments and risk analysisControls and control frameworksThird-party risk managementRisk metrics, KRIs, KCIs, and KPIsEnterprise architectureIT operations managementBusiness impact analysisBusiness continuity and disaster recovery planningData privacyOnline content includes: 300 practice exam questionsTest engine that provides full-length practice exams and customizable quizzes by exam topic