ISACA
Advanced
Certified in Risk and Information Systems Control
Shows you can identify, assess and treat IT risk and design controls, with three verified years in both risk assessment and response
- Exam
- $760
- Study
- 6-12 months
Skill
Risk Management
Risk Management is identifying, assessing, and prioritizing risks to your organization. It's about making informed decisions to protect what matters most.
Governance
Learning path
Understand risk frameworks (NIST, ISO), practice risk assessments.
Career relevance
Essential for security managers, risk analysts, compliance officers.
Practice projects
Assess risk for a small business
For a fictional small company, list key assets, threats and existing controls, then score the top ten risks for likelihood and impact.
What you'll have: A risk register with owners and a treatment choice for each risk.
Check a policy against NIST CSF 2.0
Take a published security policy template and check it against the six NIST Cybersecurity Framework 2.0 functions, noting what it leaves out.
What you'll have: A gap list tied to specific framework categories.
Certifications teaching Risk Management
Advanced1
Expert3
ISC2
Expert
Certified Information Systems Security Professional
Proves five years of security experience across eight broad domains, endorsed by a peer and tested on an adaptive exam of up to 150 items
- Exam
- $749
- Study
- 6-12 months
ISACA
Expert
Certified Information Security Manager
Verifies that you can run an information security program, and ISACA checks five years of security management experience before granting it
- Exam
- $760
- Study
- 6-12 months
ISACA
Expert
Certified Information Systems Auditor
Proves you can plan and run risk-based IT audits, and it is granted only after five years of verified audit, control or security work
- Exam
- $760
- Study
- 6-12 months