CRISC: Certified in Risk and Information Systems Control

An IT risk assessment must establish the assets that require protection and the threats that could affect them. This provides the basis for evaluating likelihood, impact, vulnerabilities, and existing controls.