IS Risk Management

Learning Outcomes

On successful completion of this Course, students will be able to: Identify principles and attributes of information security risk; Analyze the security risk of an organization; Understand an organization’s information security requirements and the need to establish policy and objectives for information security; Plan, Implement, operate and develop controls to manage an organization’s information security risks in the context of the organization’s overall risks.

Topics

1. An Introduction to Strategic IT Security and Risk Management
2. IT Risk Portfolio
3. Failure Mode and Effects Analysis (FMEA)
4. Factor Analysis of Information Risk (FAIR)
5. Quantitative and Qualitative Risk Assessment
6. OCTAVE Risk Assessment Methodology
7. COBIT for IT risk management
8. Security Risk Management Using CRAMM
9. Understanding an Information Security Management System using ISO 27001
10. Building Technology Recovery Plans