CRISC Certified in Risk and Information Systems Control All-in-One Exam Guide

by Bobby E. Rogers, Dawn Dunkerley

An all-new exam guide for the industry-standard information technology risk certification, Certified in Risk and Information Systems Control (CRISC)Prepare for the newly-updated Certified in Risk and Information Systems Control (CRISC) certification exam with this comprehensive exam guide. CRISC Certified in Risk and Information Systems Control All-in-One Exam Guide offers 100% coverage of all four exam domains effective as of June 2015 and contains hundreds of realistic practice exam questions.

Fulfilling the promise of the All-in-One series, this reference guide serves as a test preparation tool AND an on-the-job reference that will serve you well beyond the examination. To aid in self-study, each chapter includes Exam Tips sections that highlight key information about the exam, chapter summaries that reinforce salient points, and end-of-chapter questions that are accurate to the content and format of the real exam. Electronic download features two complete practice exams.


100% coverage of the CRISC Certification Job Practice effective as of June 2015
Hands-on exercises allow for additional practice and Notes, Tips, and Cautions throughout provide real-world insights
Electronic download features two full-length, customizable practice exams in the Total Tester exam engine

554 pages, Kindle Edition

First published October 22, 2015

Reviews

[Kevin · Rating 2 out of 5]

Not sure if it's the certification that is poorly defined, or the book that isn't consistent on its own. It switches definitions around, defining three types of security controls in one chapter, then defining five in a different chapter (they shouldn't change). My biggest beef with the CRISC so far is that it comingles information security with information technology. The risks of one are not the same as the risks to the other. This book states this is about IT risk all over the place. But then it talks about IT risk coming from confidentiality, integrity, and availability issues (which are specifically information security risks, not IT risks). Other sections talk about business risks, which again, these are not IT risks, they are business risks (such as going into a market in another country, etc). Frustrating. No wonder the information security industry doesn't seem to be mature with educational material like this.

[ًWaleed Naggar · Rating 3 out of 5]

Contains too much details and more than needed for the CRISC exam

[Beth Browning]

it served its purpose for the exam prep

[FY · Rating 5 out of 5]

Great book

Very well written and easy to understand and digest. I especially like the time the author took to navigate through the relevant frameworks.