2 day Best Practice in Information Risk Management course
This two day course provides delegates with an overview of the key stages involved in information risk management including risk assessment and risk treatment. Starting with ‘why risk management is needed’ delegates will cover scope setting before moving on to conducting a business impact analysis, threat assessment, risk identification, risk evaluation and treatment and concluding with risk monitoring.
Deliverables
On completion of this course, delegates will be able to:
- The business case for information and risk management
- How to identify a risk assessment methodology
- Conduct all of the following aspects of the risk management process:
- Risk Identification – Identifying assets/ownership/threats and vulnerabilities
- Risk Analysis – Likelihood analysis and conducting a BIA
- Risk Evaluation – Producing an appropriate risk calculation
- Risk Treatment – Selecting appropriate controls from options and following up controls in place.
