IT and Cybersecurity Risk Management Essential Training

Introduction

• Managing risk in IT

1. What Is IT Risk Management?

• What is IT risk?
• What is IT risk appetite?
• What is IT risk tolerance?
• Types of IT risks
• IT risk management roles and responsibilities
• Making an IT risk decision

2. IT Risk Management in Context

• IT risk management in small companies
• IT risk management in medium companies
• IT risk management in large companies
• Quantitative vs. qualitative risk assessments
• The role of organizational culture
• The minimum viable approach

3. IT Risk Management in Practice

• Performing the IT risk assessment
• Choosing an IT risk management framework
• Choosing an IT risk management tool
• Determining an acceptable level of IT risk
• Using an IT risk register
• IT risk management techniques

4. IT Risk Management on the Job

• Choosing the right IT risk management technique
• Choosing controls
• Implementing controls
• Operating controls
• Validating controls

Conclusion

• Next steps with managing risk in IT