Course Description
Discover how to identify and manage risks associated with engaging in specific business activities supported by IT solutions. Explore threat modeling, business impact analysis, and risk acceptance, mitigation, and avoidance.
Learning Objectives
System Security Certified Practitioner (SSCP 2018): Risk Management
- Course Overview
- describe how proper risk management can allow businesses to engage in productive activities while maintaining levels of security
- categorize risks using a risk register and common vulnerability scoring system, and share threat data
- identify and prioritize potential security threats
- determine how realized threats can negatively affect business processes
- apply common risk management frameworks such as ISO and NIST to organizational threats
- safely engage in endeavors that can present threats
- offload risks to third parties
- implement security controls to reduce the impact of realized threats
- avoid risk by not engaging in activities that present threats
- use industry-standard calculations to determine the feasibility of implementing a security control
- implement risk management techniques