Information Security Risk Management and Audit

This specialised micro-credential covers information systems audit, security management, and risk management based on Agile.

Course Overview

Domain

Infocomm Technology

Format

Micro‑credential Course

Duration

3+ months

Fee Subsidy

Up to 90% SF Funding

This specialised micro-credential is designed to equip learners with the expertise needed to navigate the complexities of modern information security, risk management and audit practices.

The programme is structured into three competency units, each targeting specific areas of expertise:

1. Information Systems Audit: This competency unit prepares you for the globally recognised ISACA Certified Information Systems Auditor (CISA) certification. Covering key areas such as the information systems auditing process, IT governance, and protection of information assets, you will master a risk-based approach essential for planning, executing, and reporting of audit engagements for both IT and business systems within an organisation.

2. Information Security Management: In today’s dynamic IT landscape, professionals must remain vigilant against data breaches, ransomware attacks, and other emerging threats. This unit prepares you for the ISACA Certified Information Security Manager (CISM) certification, empowering you to assess risks, implement effective governance frameworks, and proactively respond to security incidents.

3. Risk and Information Systems Control: Focused on preparing you for the ISACA Certified in Risk and Information Systems Control (CRISC) certification, this competency unit emphasises a proactive risk management approach rooted in Agile methodology. You will learn to enhance your organisation’s resilience, deliver tangible stakeholder value, and streamline risk management practices across the enterprise.

Integrating online and in-person delivery, this micro-credential offers hands-on experience through case studies and lab sessions. It benefits from the expertise of SIT faculty and experienced industry practitioners, ensuring high-quality instruction and mentorship. Upon completion, you will be equipped with the skills and credentials needed to excel in roles related to information security, risk management, and audit across organisations worldwide.

This micro-credential is part of the CSM Pathway in Applied Computing.

Who Should Attend

The micro-credential prepares learners for the following job roles:

Information security managers/analysts
IT auditors
Risk management specialists
Cybersecurity consultants

Assumed Prior Knowledge

Learners should possess knowledge in key areas within computer science, computer networking, cybersecurity, databases, and programming, which are typically covered in an IT-related three-year diploma.

What You Will Learn

This micro-credential is predominantly delivered through a competency-based education (CBE) approach where learners acquire and demonstrate mastery of knowledge and skills that are directly relevant to job functions. This prepares them to be industry-ready where they can apply their newly acquired competencies to their work.

List of Competency Units

Code	Competency Unit Title	Credits
ICT3501C	Information Systems Audit	6
ICT3502C	Information Security Management	6
ICT3503C	Risk and Information Systems Control	6

The above are competency units that constitute this micro-credential. Upon completion of the micro-credential, you will be able to:

Manage information systems audit, control and assurance activities in an organisation
Manage information security functions in an organisation
Manage IT risk activities in an organisation

Coaching for Success

During the course, you will have access to a team of qualified success coaches who can work with you on learning strategies or to develop a personalised learning plan. Through the success coaches, you can gain access to a wide range of resources and support services, and be empowered with the necessary tools to navigate your learning journey successfully.

Teaching Team

Ho Hee Meng

Senior Lecturer, Infocomm Technology, Singapore Institute of Technology

Schedule

Week	Learning Activity	Delivery, Location and Time*
1	Briefing session on the micro-credential and all competency units	In-person SIT Punggol Campus 4:00 pm – 6:00 pm
1 – 10	Self-directed learning	Asynchronous Online
1, 3, 5 – 6 & 9 – 10	In-class lab session with consultation (Optional – to book in advance)	In-person SIT Punggol Campus 1:00 pm – 5:00 pm
4, 8, 11 – 13	In-class assessments	In-person SIT Punggol Campus 1:00 pm – 5:00 pm

* May change as it gets closer to course commencement.

Certificate and Assessment

A Specialist Certificate in Information Security Risk Management and Audit will be issued to learners who:

Attend at least 75% of the course and
Undertake and pass all credit bearing assessments

Assessment Plan

The learner will undertake a mixture of activities such as quizzes during the course.

Fee Structure

The full fee for this course is S$9,868.86.

Category	After SF Funding
Singapore Citizen (Below 40)	S$2,960.66
Singapore Citizen (40 & Above)	S$1,149.86
Singapore PR / LTVP+ Holder	S$2,960.66
Non-Singapore Citizen	S$9,868.86 (No Funding)

Note:

A one-time, non-refundable matriculation fee of $54.50 will be collected before course commencement.
All fees above include GST. GST applies to individuals and Singapore-registered companies.

Funding

Learn more about funding schemes available

Course Runs

There are no upcoming course runs at the moment.

Subscribe to our mailing list to learn about the latest dates as soon as they become available.

SUBSCRIBE NOW

Learning Pathway

Earn Stackable Specialist Certificates

Earn micro-credentials in Applied Computing (via the CSM Pathway) and unlock career opportunities in areas such as DevOps, network security and machine learning. Stack these micro-credentials towards a Bachelor of Science (Honours) in Applied Computing at SIT.

Explore More