Information Security and Risk Management Planning

Business managers and IT professionals alike depend on risk management to make appropriate decisions for their organizations. This course covers the essentials of risk management, examines the COBIT framework for risk management, and helps you learn how to create a risk management plan.

Risk management is important to the success of every company that takes no risks and doesn't thrive. On the other hand, a company that ignores risk can fail when a single threat is exploited. This web-based course prepares business managers and IT professionals who depend on risk management to make appropriate decisions for their organizations. The course offers access to online resources including texts, case studies, lectures, and paper-based labs that duplicate real-world scenarios. Qualified instructors are available to answer questions about the content and theory.

To begin, you will align risks, threats, and vulnerabilities to one of the seven domains of a typical IT infrastructure and prioritize them (critical, major, or minor) based on their risk impact to an organization. Next, you'll explore COBIT P09 risk management objectives and use them to define the scope of risk management for a typical IT infrastructure. Finally, you will work on an IT risk management plan. This part of the course includes tasks such as defining the plan's scope, relating risks, threats, and vulnerabilities to the plan, and creating a plan summary.