The CRISC Certification for Controlling Information System Risk
CRISC Risk Mitigation ConsultingThe Certified in Risk and Information Systems Control (CRISC) program was established by ISACA in 2010 to verify an IT professional's ability to design, deploy, and maintain information system controls to manage network risk. Progent can provide the services of a CRISC-certified consultant to help you identify, quantify, mitigate, and monitor risks throughout your information network, including both technology and business processes.

Progent can also help you create and implement a risk management strategy based on leading practices promoted by CRISC and geared to align with your company's risk tolerance, business objectives, and IT budget. Areas covered by Progent's risk management services include business continuity planning and disaster recovery preparedness. Progent's risk management services are complementary to the services available from Progent's CISA-certified cybersecurity audit consultants and Progent's CISM-certified cybersecurity management experts.

Progent's Support for CRISC Focus Areas
The CRISC (pronounced "see-risk") certification program verifies a candidate's hands-on work experience and exhaustively tests skills in specific areas of risk management:

  • Risk identification
  • Risk assessment
  • Risk response and mitigation
  • Risk and control monitoring and reporting
Progent offers a comprehensive selection of consulting services for each of the risk management domains defined by CRISC.

Risk Identification
This area of risk management covers gathering the information needed to create a risk management strategy that is relevant to your business. Consulting services offered by Progent in this area include:

  • Collect information and review documentation to make sure you identify and evaluate significant risk scenarios.
  • Identify legal, regulatory, and contractual requirements and organizational policies and standards related to your information system to determine their potential impact on your business goals.
  • Identify potential threats and vulnerabilities for your business processes, associated data, and supporting capabilities to assist in evaluating your enterprise risk.
  • Create and maintain a risk register to make sure all identified risk factors are considered.
  • Compile risk scenarios to estimate the likelihood and impact of significant events that could disrupt your business.
  • Develop a risk awareness program and conduct training to make sure your stakeholders understand information system risk so they can contribute to your risk management process.
  • Match identified risk scenarios to your associated business processes to help determine risk ownership.
  • Validate risk appetite and risk tolerance with your senior leadership and key stakeholders to make sure they are in agreement.
Risk Assessment
This area of risk management involves the analysis and evaluation of IT risk in order to drive strategic risk management decisions that provide optimal support for business objectives. Consulting services offered by Progent in this area include:
  • Frame the analysis of identified risk scenarios in the context of your company's structure, policies, and control mechanisms in order to assess each scenario's likelihood and consequences.
  • Review existing risk controls and assess their ability to reduce information system risk.
  • Study the findings of risk and control analysis to identify possible disconnects between the actual and intended readiness of your risk management environment.
  • Make sure that risk ownership is properly assigned to clarify the chain of accountability.
  • Review risk assessment findings to appropriate stakeholders to inform risk management strategy.
  • Incorporate the risk assessment findings in the risk register.
Risk Response and Mitigation
This area of risk management involves developing and implementing risk responses to ensure that risk factors and events are handled effectively and in line with your business goals and IT budget. Consulting services offered by Progent in this area include:
  • Identify and evaluate risk response options and provide your management with information needed to make sensible decisions about responding to risk.
  • Review risk responses with your relevant stakeholders to validate efficiency, effectiveness, and economy.
  • Apply risk criteria to help you develop the risk profile for approval by your management.
  • Help you develop risk response action plans to address risk factors identified in your organizational risk profile.
  • Help you develop business cases supporting your investment plan to make sure risk responses are aligned with your business goals.
Risk and Control Monitoring and Reporting
This area of risk management addresses monitoring risk and communicating information to your relevant stakeholders to ensure the continued effectiveness of your company's risk management strategy. Support services available from Progent in this area include:
  • Collect and validate data that measure key risk indicators (KRIs) to monitor and communicate their status to associated stakeholders.
  • Monitor and communicate key risk indicators (KRIs) and management activities to assist your relevant stakeholders in their decision-making process.
  • Facilitate independent risk assessments and risk management process reviews to ensure they are performed efficiently and effectively.
  • Identify and report on risk, including compliance, to initiate corrective action and meet business and regulatory requirements.
  • Interview process owners and review process design documentation to gain an understanding of your business process objectives.
  • Design information systems controls in consultation with process owners to make sure they meet your business goals.
  • Help identify the people, infrastructure, information, and other resources needed to implement and manage IS controls at an optimal level.
  • Implement information systems controls to mitigate risk.
  • Help define metrics and key performance indicators (KPIs) so you can measure your information systems control performance in meeting business goals.
  • Provide documentation and training to make sure your IS controls are performed effectively.
  • Assess and recommend tools and techniques to automate your information system control verification processes.
  • Make sure all your controls are assigned to owners who take responsibility for them.
  • Establish control criteria to allow you to perform control life cycle management.
Additional Zero-Downtime Technologies Provided by Progent
Progent's certified consultants can help your business to design a sensible, zero-downtime system that resolves major issues encompassing a wide range of infrastructure technologies and operations such as:

Disaster Recovery Planning
Progent's disaster recovery planning professionals can show you how to create a disaster recovery plan in order to resume network operations in the event of an information network disaster. Progent can assist you to define a comprehensive disaster recovery plan that incorporates scheduled disaster recovery evaluations and drills. Progent's Microsoft and Cisco-certified professionals can also help you create an affordable, high-availability system solution that takes into account availability issues involving a wide array of infrastructure technologies and procedures. To learn more, visit Workplace Recovery Consulting Services.

Managed Cloud Backup: ProSight Data Protection Services
ProSight Data Protection Services provide small and medium-sized businesses an affordable end-to-end solution for reliable backup/disaster recovery. For a low monthly rate, ProSight Data Protection Services automates your backup processes and allows rapid recovery of critical data, apps and virtual machines that have become unavailable or damaged as a result of hardware failures, software bugs, natural disasters, human error, or malware attacks like ransomware. ProSight DPS can help you back up, retrieve and restore files, folders, apps, system images, plus Microsoft Hyper-V and VMware virtual machine images. Critical data can be protected on the cloud, to an on-promises device, or mirrored to both. Progent's cloud backup specialists can provide advanced expertise to set up ProSight Data Protection Services to be compliant with regulatory standards like HIPPA, FIRPA, PCI and Safe Harbor and, when necessary, can assist you to recover your business-critical information. Read more about ProSight DPS Managed Backup.

Microsoft Server 2016 Disaster Recovery
Progent's Windows Server 2016 disaster recovery/business continuity consultants can help you to design a disaster recovery system built around Microsoft's cloud-tested Failover Clustering technologies including Cluster OS Rolling Upgrade for non-disruptive migration to Windows Server 2016, Storage Replica for zero-data-loss recovery, Storage Spaces Direct for enterprise-class storage clusters using low-cost equipment, VM Load Balancing for improving the performance and fault-tolerance of Failover Clusters while reducing TCO and management overhead, and Cloud Witness for easy, affordable deployment of a failover cluster quorum witness. To learn more, see Windows Server 2016 Disaster Recovery and Business Continuity Help.

Microsoft Server 2012 Failover Clustering
Microsoft Windows Server 2008 R2 brought world-class fault tolerance and recoverability to Microsoft's clustering platform. Microsoft Windows Server 2012 R2 builds on this foundation and provides important new and enhanced features offering increased expandability, non-stop storage availability for server applications, streamlined administration, faster failover, and additional options for architecting clusters. To learn more, visit Windows Server 2012 Clustering Consulting Services.

VMware Site Recovery Manager (SRM) Disaster Recovery Solutions
VMware's Site Recovery Manager (SRM) is a component of VMware vCenter that allows you to define, automate and test a consistent process for restoring services rapidly following a breakdown. SRM supports centrally controlled and automated disaster recovery, application mobility, plus non-disruptive site relocation, failback and re-protect. SRM also allows transparent testing for disaster recovery, upgrades and patches and can generate audit reports to verify full service restoration, validate Service Level Agreements and prove compliance. Progent can provide the skills of a VCDX certified VMware SRM consulting expert to assist your organization to design, deploy, test and administer a DR system powered by VMware Site Recovery Manager.

NetApp MetroCluster Disaster Recovery Platform
NetApp MetroCluster is a disaster recovery software suite that uses array-based storage clustering with synchronous replication to deliver fast, zero data loss disaster recovery (DR) between sites that are as far as 185 miles (300km) apart. Progent can provide online or on-premises access to a NetApp MetroCluster consultant who can assist your business to design, deploy, administer, upgrade, test and repair a disaster recovery solution based on NetApp MetroCluster. Progent can assist you to choose an architecture for your MetroCluster environment that meets your functional requirements and IT budget. Progent can ensure you follow best practices for configuring your MetroCluster environment by providing help with procedures such as assigning disk pools and shelf IDs, determining aggregate layout, setting up NetApp FlexVol volumes, setting up NetApp Snapshot, provisioning switches, implementing a tiebreaker, designing a TCP/IP configuration replication network between your peered clusters, and testing your MetroCluster DR solution to verify compliance with industry standards and regulatory requirements.

High Availability Load Balancing
Progent offers high availability load balancing consulting covering system load balancing, load balanced programs, network infrastructure routing, and content delivery technology including Cisco Content Engine. High availability load balancing solutions for which Progent can provide consulting expertise include Windows Server 2003 and 2008 Network Load Balancing Manager, Citrix Access Suite and Presentation Server, Cisco CSS, Cisco Distributed Director and LocalDirector 400 series, and F5 Networks 3-DNS. To read more, visit High Availability Load Balancing.

Fault Tolerant Data Centers
Progent's Data Center consultants can show you how to select high availability data centers that meet the particular needs of your company. Fault tolerant colocation sites are particularly appealing to small and mid-size businesses because of their affordability and simplified logistics in comparison to taking a do-it-yourself approach. Attempting to design an on-site data center with even a minimum level of fault tolerance is too costly for typical small organizations. Progent is ready to help you get all the advantages of 24x7 colo centers by offering a complete array of consulting and maintenance services. To find out more, go to High-Availability Internet Data Centers Consulting.

Failsafe Interoffice Connectivity
Progentís multi-site connection consultants can help companies achieve fault tolerant branch office connectivity solutions via redundant networks with transparent failover. Progentís Cisco-certified CCIE engineers can design and deploy fault-tolerant Inter-office networks supported by zero-downtime EIGRP network routers or fault tolerant OSPF deployment of Cisco routers. Progent can demonstrate how multi-path connections and transparent fail-over can provide affordable 24x7 interoffice connectivity. To read more, go to Non-stop Interoffice Connectivity.

Fault Tolerant Internet Connections
Progent's Cisco-certified network experts can help you build an economical, fault tolerant Internet connection solution that can achieve non-stop Internet connectivity via a wide array of high availability Internet network technologies including non-stop BGP, transparent fail-over, and redundant ISPs. Progent can provide CCIE engineers to help you apply the most advanced techniques for 24x7 Internet access to create an economical, completely redundant Internet interface with automatic failover and other capabilities to create non-stop Internet access. To learn more, go to High Availability Internet Connectivity Solutions.

Backup and Restore Solutions Consulting
Progent can provide affordable online access to engineers with expertise in a broad array of utilities and technologies that provide solutions for protecting Windows, Apple Mac, and Linux/UNIX servers and desktops as well as laptops and smartphones. Progent offers consulting support for leading backup products including Acronis Backup and Recovery, Symantec Backup Exec, BackupAssist, CrashPlan PRO, Double-Take Software, Mozy, Retrospect, Time Machine, VMware Data Recovery, and Oracle Solaris FLARs. Progent's consultants can assist your company to implement, upgrade, or troubleshoot backup/restore systems for a variety of topologies such as on-premises, edge to datacenter, cloud-based, or hybrid. For details, see Backup and Restore Solutions Consulting.

Microsoft System Center Data Protection Manager (SCDPM) Backup and Restore Consulting Experts
Progent's certified System Center Data Protection Manager engineers can assist you to create a practical disaster recovery plan, design a cost-effective fault-tolerante IT architecture, configure a SCDPM-based recovery solution, thoroughly test your system, educate your IT personnel or regular service providers how to manage SCDPM, or provide complete IT support outsourcing such as remote housing of System Center Data Protection Manager servers in Progent's secure data center. To read more, visit System Center Data Protection Manager (SCDPM) Consulting Services.

Barracuda Backup Multi-site and Cloud Data Backup and Disaster Recovery
Barracuda Backup is an affordable, subscription-based backup/restore platform for small and mid-size businesses. A Barracuda Backup deployment can incorporate a custom-designed physical storage device built by Barracuda or a software-based appliance with comparable features but which uses your own storage hardware. Barracuda Backup protects critical business data generated locally, at one or multiple remote sites, or in the cloud. For disaster recovery, you can replicate data to the Barracuda Cloud, to Amazon AWS, or to any site with a Barracuda Backup appliance. Progent is a certified Barracuda partner and Progent's Barracuda Backup consultants offer a broad array of consulting services to help your business to plan, configure, manage and troubleshoot a BDR solution built on Barracuda technology. For details, go to Barracuda Backup and disaster recovery consulting.

Altaro VM Backup Solutions for Data Protection and Disaster Recovery
Altaro VM Backup offers small and mid-size organizations a dependable and budget-friendly platform for backing up and restoring Hyper-V and VMware-powered virtual machines. Altaro VM Backup can be deployed in local, remote, distributed, and cloud-hosted environments and also supports low-cost cloud backup to Microsoft Azure storage. Headline capabilities include state-of-the-art inline deduplication to cut backup storage needs, Continuous Data Protection (CDP) with backup intervals as short as five minutes for minimizing your Recovery Point Objective, advanced encryption, item-level recovery capability for specific files and emails, support for Windows Server Cluster Shared Volumes (CSV) and for vCenter for handling larger environments, and the ability to leverage Microsoft Volume Shadow Copy Service to back up live virtual machines without downtime. Progent is an Altaro partner and offers a broad range of services to assist you to plan, deploy, manage and troubleshoot a backup/restore solution based on Altaro VM Backup. To learn more, see Altaro VM Backup Consulting Services.

Consulting for Double-Take Software for Backup/Restore
Double-Take Software offers a family of tools designed to deliver small businesses a variety of affordable solutions for replicating and recovering vital applications such as Exchange Server, SQL, Blackberry, and Microsoft Office SharePoint. Progentís disaster recovery planning consultants have in-depth experience integrating Double-Take Software products into small company information systems to create an advanced level of fault tolerance and disaster recovery readiness at a budget-friendly price. For more information, go to Consulting Services Double-Take Software for Data Backup.

Why Pick Progent for Disaster Recovery/Business Continuity Planning?
Because Progent is a Microsoft Partner and offers specialized application expertise for a broad range of small business software programs, Progent is able to help customers to arrive at efficient IT solutions that optimize the productivity of your information system. As a Registered Partner for Cisco, Progent can provide the services of qualified engineers and specialists with experience in designing, installing and managing networking solutions built on Cisco technology. The broad scope of Progent's IT know-how and Progent's familiarity with the needs of small companies make Progent a great partner for building and running an affordable, fault-tolerant information system.

Other Credentials Earned by Progent's Cybersecurity and Information Assurance Consultants
In addition to offering the expertise of information assurance professionals with CRISC certification, Progent can also provide your business with access to CISM-certified security management consultants, CISSP-certified cybersecurity experts, CISSP-ISSAP certified cybersecurity architecture consultants, CISA-certified cybersecurity audit professionals, and GIAC-certified information assurance specialists.

Contact Progent for help from a CRISC-certified Risk Management Consultant
To learn how to receive support from a CRISC-certified risk management expert, phone Progent at 800-993-9400 or visit Contact Progent.
















© 2002- 2019 Progent Corporation. All rights reserved.


More topics of interest: