Conducting Practical Risk Analysis for Security Professionals
*(ISC)² Members/Associates can access this course for free by logging in above and clicking the 'My Courses' menu item.
Risks and security related issues represent an ongoing concern of any business. Assessing and analyzing risks and issues should be a continuous and comprehensive exercise in any organization. In this Immersive Course, learners gain practical experience working through risk assessment, analysis, mitigation, remediation, and communication. Throughout the course, security professionals acquire skills needed to holistically examine operational risk management, learn to work cross-functionally, determine how to use risk data effectively, and disseminate actionable information and findings. Within the immersive exercise experienced throughout the course, learners apply policies and procedures against organizational risk appetite, assess governance and compliance frameworks, and select the best means to communicate given an organizations risk culture and awareness.
This course includes the following modules: 1) Discovering Risk 2) Organizing Risk 3) Eliciting Risk 4) Analyzing Risk 5) Communicating Risk
Audience or Who Should Take This Course
Cybersecurity professionals who wish to learn more about organizational risk analysis, including how it manifests, deploys, and is acted on within a holistic corporate setting.
Basic understanding of risk management principles and how cybersecurity operations connect to risk management practices. A high-level understanding of organizational risk process within a specific organization is helpful, but not absolutely necessary.
How This Course Works
In this course, learners follow along with the team at Rane Logistics, a fictional company, as they work though practical risk analysis. As the learner, participate as a member of the team as they learn strategies for eliciting, organizing, and analyzing risk and conduct qualitative and quantitative risk analysis. Gain experience and select the best approach to work with the specific types of risks and issues the data reveals.
Throughout this course learners will be asked to work through and complete the following activities:
- Immersive, scenario-based learning
- Templated (downloadable) processes and resources
- Narrated video and audio content
- Knowledge Checks, Summary Checks, and Final Assessment Course Evaluation
CPE credits for (ISC)2 credentials must be self-reported by members and associates through the (ISC)2 CPE Portal accessible via www.isc2.org using your member login credentials.
CPE credits earned for this course may be eligible for continuing professional education credits for non-(ISC)² certifications. Please visit the continuing education requirements established by the credentialing organization for eligibility.
For specific questions related to your CPE credits or the CPE portal please contact member support - email@example.com