Information Security Risk Management

Course objectives

• Apply recognised risk assessment methodologies to information assets and systems
• Build and maintain an information security risk register
• Select and justify security controls proportionate to identified risk
• Align information security risk management with recognised standards and frameworks
• Report information security risk exposure to senior management and audit committees

Who should attend

• Information security and IT risk officers
• Internal and external auditors
• Compliance and governance managers
• IT managers responsible for system security
• Enterprise risk management professionals

Course outline

1. 01Foundations of information security risk management
2. 02Asset identification, classification and threat modelling
3. 03Risk assessment methodologies and scoring
4. 04Control selection, implementation and validation
5. 05Aligning practice with recognised security standards
6. 06Reporting risk to executives and audit and risk committees

Scheduled sessions