Risk Management for Cyber Security Managers

Packt via Coursera

Go to class Write review

Overview

Google, IBM & Meta Certificates – 40% Off

One plan covers every Professional Certificate on Coursera.

Unlock All Certificates

This course features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. Build the expertise to identify, assess, and mitigate cybersecurity and AI-related risks in modern organizations. You'll develop practical skills in risk analysis, governance, compliance, security controls, and executive communication while learning industry-recognized frameworks and standards that strengthen cyber resilience. The course begins with the fundamentals of cybersecurity risk management, introducing core concepts, threat landscapes, and professional practices. You'll then progress through the complete risk management lifecycle, including risk identification, assessment, mitigation, monitoring, and hands-on workshops for building risk registers and applying quantitative analysis using the FAIR framework. Next, you'll explore AI risk management, AI governance, regulatory requirements, information classification, security controls, third-party risk management, vulnerability management, ISO standards, and global compliance frameworks. The course concludes by teaching you how to communicate technical risks effectively to executives and stakeholders using business-focused reporting techniques. This course is ideal for IT professionals, cybersecurity practitioners, risk analysts, compliance specialists, security managers, and aspiring governance professionals seeking practical cybersecurity risk management skills. A basic understanding of IT and cybersecurity concepts is recommended. The course is designed for learners at the Intermediate level. By the end of the course, you will be able to identify, assess, quantify, and manage cybersecurity and AI risks, implement industry-standard risk management frameworks, develop governance policies, support regulatory compliance, communicate risks effectively to business leaders, and strengthen organizational cyber resilience.

Syllabus

Welcome to the Course

In this module, we will introduce the course, discuss the profession of risk management, and explore essential standards and frameworks in cybersecurity.

Foundations of Cybersecurity Risk Management

In this module, we will delve into the concept of risk, types of risks, the scope of risk management, and the roles involved, as well as examine common threats and adversaries.

Risk Management

In this module, we will cover the comprehensive process of cyber risk management, including identification, assessment, mitigation, avoidance, transference, acceptance, and monitoring of risks.

Quantitative Risk Analysis

In this module, we will explore data-driven approaches to cybersecurity risk analysis by comparing qualitative and quantitative methods, introducing the FAIR framework, and demonstrating how to quantify and communicate cyber risks through practical application.

AI Risk Management

In this module, we will examine how AI is transforming cybersecurity, explore leading AI governance frameworks and regulatory requirements, understand AI-powered threats, and develop practical policies for responsible AI risk management.

Information Classification and Security Controls

In this module, we will focus on how to classify information and implement appropriate security controls to protect against cyber risks effectively.

Third-Party Cyber Risk Management

In this module, we will explore the options for third-party cyber risk management, including how to identify and evaluate third-party vendors for outsourcing risk control.

Vulnerability Management

In this module, we will discuss the identification, assessment, treatment, and reporting of security vulnerabilities, as well as the use of ethical hacking and penetration testing.

ISO Risk Management Standards

In this module, we will introduce internationally recognized ISO standards for cybersecurity risk management, exploring ISO 31000, ISO 27001, and ISO 27005 to help you implement industry-aligned governance and security practices.

Communicating Risks to Executives and Stakeholders

In this module, we will focus on effective communication strategies for presenting cybersecurity risks to stakeholders. You’ll learn how to communicate technical details in business terms and deliver concise, actionable reports.

Regulatory & Compliance Frameworks

In this module, we will examine the global cybersecurity regulatory landscape by exploring key compliance frameworks, disclosure requirements, and privacy regulations that shape organizational risk management and governance practices.

Conclusion

In this module, we will conclude the course with a summary of key concepts, reflections on the importance of cyber risk management, and a thank-you note from the author.