Cybersecurity and Risk Management

Overview:

This course covers the professional practice of cybersecurity risk management considered from the perspective of enterprise governance. It encompasses cybersecurity risk identification, classification, measurement, remediation, monitoring, and reporting.

Objectives

The overall objective is to enable and empower risk professionals to confidently, efficiently, and effectively contribute to cybersecurity risk management programs.

Specific skills that will be taught in this course include how to:

• Recognize and examine cybersecurity risk frameworks
• Plan and execute cybersecurity scenario analysis
• Summarize cybersecurity governance structures
• Select and interpret cybersecurity risk indicators

Outline:

Cybersecurity Risk Frameworks

• Industry
• Regulatory
• Enterprise

 Cyber Scenario Analysis

• Threat Actors
• Security Operations
• Event Categories
• Loss Calculation

 Technology Controls

• Roles and Responsibilities
• Governance Processes

Cybersecurity Risk Metrics

• Key Cyber Risk Indicators
• Cybersecurity Risk Appetite and Tolerance