Skip to Content
View all events

Certified ISO 31000 Internal Controls Risk Analyst (CICRA) Crash SuperReview by Allen Keele

Published by Pearson

Intermediate content levelIntermediate

Crush the ISO 31000 CICRA Certification Exam

Get trained and certified in ISO 31000 and ISO 27005 Enterprise Risk Management. Because all information security analysis, controls, and processes are essentially a product of risk management, this training provides the training and credentialing you need to become recognized as an authority in leading or facilitating risk assessment and management according to the ISO/IEC risk management framework standards.

The ISO 31000 CICRA credential certifies your understanding of how ISO/IEC risk management standards can be used to develop a custom enterprise risk management program that fulfills the requirements of both ISO/IEC 27001, and ISO 22301. It also helps fulfill the competence requirements of the certifications themselves. Certified Information Security provides the training and credentialing you need to become recognized as an authority in leading or facilitating risk assessment and management according to the ISO/IEC risk management framework standards.

ISO 31000 CICRA is the risk management certification supporting a career in risk management, information security management, or business continuity/disaster recovery management. This certification validates competence and understanding for developing and managing a custom risk-management methodology based upon the ISO/IEC Risk Management Frameworks.

What you’ll learn and how you can apply it

By the end of the live online course, you’ll understand:

  • This training prepares certification candidates for the ISO 31000 CICRA exam #RM101 proctored by Certified Information Security.
  • The knowledge and skills to implement the formal structure, governance, and policy of a robust enterprise risk management system conforming with internationally recognized and respected ISO 31000, ISO 31010, and ISO 27005 standards
  • The risk management concepts prominent in cert credentials like CISSP, CRISC, CISA, CISM, CGEIT, CCSK, CCAK, and NIST CSF Lead Implementer, and others

And you’ll be able to:

  • Describe the principles and processes of risk governance and management;
  • Provide a thorough overview of the requirements of ISO 31000, ISO 31010, and 27005
  • Give practical guidance on designing and implementing a suitable enterprise risk management framework

This live event is for you because...

  • You are seeking technical credentials where risk assessments and risk management are prominent core exam topics such as CISSP, CRISC, CISA, CISM, CGEIT, CCSK, CCAK, and NIST CSF Lead Implementer, and others
  • You’re supporting or leading ANY ISO management system in an organization you need to know ISO 31000
  • You work in information security, cybersecurity, business continuity management, compliance management, fraud control, quality management, environmental management, and even occupational health and safety ALL require risk assessments at their core.

Prerequisites

  • IT experience including networking, applications, and systems security concepts.

Recommended Preparation

Recommended Follow-up

Schedule

The time frames are only estimates and may vary according to how the class is progressing.

Day 1

Segment 1: Course Introduction and ISO 31000 CICRA preparation approach (20 minutes)

  • ISO 31000 CICRA test taking strategies and study plans

Segment 2: ISO 31000 CICRA Domain 1 – ISO 31000 and Enterprise Risk Management Foundation Concepts (100 minutes)

  • Introduction to enterprise risk management, risk management governance and oversight, internal and external business context of the organization, risk leadership, and enterprise risk management organizational structure
  • CICRA Domain 1 practice questions

Break (15 min)

Segment 3: ISO 31000 CICRA Domain 2 – ISO 31000 and Enterprise Risk Management Architecture and Strategy (105 minutes)

  • Designing a Framework (Program) for Managing Risk
  • CICRA Domain 2 practice questions

Day 2

Segment 4: ISO 31000 CICRA Domain 3 – ISO 31000 and ISO 27005 Risk Assessment, Part 1 (65 minutes)

  • How to perform proper risk identification in conformance with the international best practices of the ISO 31010 and ISO 27005 standards
  • CICRA Domain 3 Practice Questions

Break (15 min)

Segment 5: ISO 31000 CICRA Domain 3 – ISO 31000 and ISO 27005 Risk Assessment, Part 2 (65 minutes)

  • How to perform proper risk analysis and evaluation in conformance with the international best practices of the ISO 31010 and ISO 27005 standards
  • CICRA Domain 3 Practice Questions

Break (15 min)

Segment 6: ISO 31000 CICRA Domain 4 – ISO 31000 and ISO 27005 Risk Treatment, Certification, Communication and Reporting, and Monitoring (60 minutes)

  • Risk response, control design & implementation, and risk monitoring and reporting
  • CICRA Domain 4 Practice Questions

Segment 7: Course wrap-up, next steps and Q&A (20 minutes)

  • Strategies for developing a study plan, getting ready for test day, and how to maintain your ISO 31000 CICRA certification

Your Instructor

Allen Keele

Allen Keele is the founding Principal at Certified Information Security. He is a published and sought-after subject-matter expert and business systems architect for various ISO GRC-related management systems. He routinely presents to, and collaborates with, board members, CEOs, CFOs, COOs, CROs, CTOs, Chief Privacy Officers, Chief Information Officers/Security Officers, Chief Compliance Officers, Business Continuity Managers, Auditors, Fraud Risk Officers, Quality Managers, Procurement Managers, and HSE Managers to establish and integrate comprehensive and ISO-certifiable standards-based management systems and policies across functions throughout the enterprise. Allen’s customers include the US National Security Agency, several US Department of the Interior bureaus, the US Marine Corps, Intuit, Deloitte, KPMG, Ernst & Young, PriceWaterHouse Coopers, American Express, Brinks, Northrop Grumman, Microsoft, IBM, Blackberry, J.P. Morgan Chase, Comcast, and HP.

Allen is a preeminent professional certification preparation author and expert, who is credited with co-authoring two popular CISA certification books, including Pearson Education’s CISA Exam Cram 2. Allen has also authored and narrated some of the world’s leading ISACA certification preparation courses, including Allen Keele’s CISA SuperReview, Allen Keele’s CISM SuperReview, and Allen Keele’s CRISC SuperReview.

Allen holds over 25 certifications, active and retired. Active certifications include CCSK, NIST CSF Lead Implementer, CISSP, CISM, CISA, CRISC, Certified ISO 27001 Lead Implementer, Certified ISO 27001 Lead Auditor, Certified ISO 31000 Internal Controls Risk Analyst (CICRA), Certified ISO 22301 Business Continuity Strategist (CBCS), Certified ISO 22301 Business Continuity Manager, Certified Fraud Control Manager, Certified ISO 37001 Anti-Bribery and Corruption Manager CABCM), Certified Fraud Examiner (CFE), and Certified ISO 37301 Compliance Professional (CCP). Well-recognized retired certifications include Microsoft MCSE/MCT, Cisco CCNA/CCDA/CCNP, Check Point CCSE+/CCSI, Citrix CCAE/CCI, Nokia NSA/NVGA, SCNP, and Security+.

Skill covered

ISO