We may earn an affiliate commission when you visit our partners.
(ISC)² Education & Training
Risk Identification, Monitoring, and Analysis: In the Risk Identification, Monitoring, and Analysis session, you will learn how to identify, measure, and control losses associated with adverse events. You will review, analyze, select, and evaluate safeguards for mitigating risk.You will learn processes for collecting information, providing methods of identifying security events, assigning priority levels, taking the appropriate actions, and reporting the findings to the correct individuals. After collection of the details from monitoring, we can analyze to determine if the system is being operated in accordance with accepted industry practices, and in compliance with organization policies and procedures.
Read more
Risk Identification, Monitoring, and Analysis: In the Risk Identification, Monitoring, and Analysis session, you will learn how to identify, measure, and control losses associated with adverse events. You will review, analyze, select, and evaluate safeguards for mitigating risk.You will learn processes for collecting information, providing methods of identifying security events, assigning priority levels, taking the appropriate actions, and reporting the findings to the correct individuals. After collection of the details from monitoring, we can analyze to determine if the system is being operated in accordance with accepted industry practices, and in compliance with organization policies and procedures.
Read more
Risk Identification, Monitoring, and Analysis: In the Risk Identification, Monitoring, and Analysis session, you will learn how to identify, measure, and control losses associated with adverse events. You will review, analyze, select, and evaluate safeguards for mitigating risk.You will learn processes for collecting information, providing methods of identifying security events, assigning priority levels, taking the appropriate actions, and reporting the findings to the correct individuals. After collection of the details from monitoring, we can analyze to determine if the system is being operated in accordance with accepted industry practices, and in compliance with organization policies and procedures.
Incident Response and Recovery: In the Incident Response and Recovery Session, you will gain an understanding of how to handle incidents using consistent, applied approaches in order to resolve. Once an incident is identified, action will be necessary in order to resolve. We will examine processes such as damage recovery, data integrity and preservation, and the collection, handling, reporting, and prevention. You will be introduced to the Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) concepts and how they can be utilized in order to mitigate damages, recover business operations, and avoid critical business interruption. Through the use of the DRP, you will understand the procedures for emergency response and post-disaster recovery.
Course Objectives
1. Describe the risk management process
2. Perform security assessment activities
3. Describe processes for operating and maintaining monitoring systems
4. Identify events of interest
5. Describe the various source systems
6. Interpret reporting findings from monitoring results
7. Describe the incident handling process
8. Contribute to the incident handling process based upon role within the organization
9. Describe the supporting role in forensics investigation processes
10. Describe the supporting role in the business continuity planning process
11. Describe the supporting role in the disaster recovery planning process
Register for this course and see more details by visiting:
OpenCourser.com/course/4bb949/identifying
What's inside
Syllabus
Understand the Risk Management Process
Module Topic: Risk Visibility and Reporting, Risk management Concepts, Risk Assessment, Risk Treatment, Audit Findings. In Risk visibility and Reporting, you will learn about risk register, creating a risk register, risk register, and risk management steps. In Risk Management Concepts, you will learn about, key terms, and generic risk model with key factors - NIST SP 800-30 R1. In risk Assessment, you will learn about NIST SP 800- 30 R1 risk assessment methodology, Step 1. prepare for the assessment, Step 2. conduct the assessment, Step 2a. identify threat sources, step 2b. identify potential threat events, step 2c. identify vulnerabilities and predisposing conditions, step 2d. determine likelihood, step 2e. determine impact, step 2f. risk determination, risk level matrix, risk levels, step 3. communicating and sharing risk assessment information, step 4. maintaining the risk assessment, and risk assessment activity. In Risk Treatment, you will learn about, risk mitigation, example control: passwords, control selection, residual risk, risk transference, risk avoidance, and risk acceptance. In audit Findings, you will learn about auditors, types of audits, audit methodologies, auditor responsibilities, audit scope, documentation, and response to audit.
Read more
Syllabus
Understand the Risk Management Process
Module Topic: Risk Visibility and Reporting, Risk management Concepts, Risk Assessment, Risk Treatment, Audit Findings. In Risk visibility and Reporting, you will learn about risk register, creating a risk register, risk register, and risk management steps. In Risk Management Concepts, you will learn about, key terms, and generic risk model with key factors - NIST SP 800-30 R1. In risk Assessment, you will learn about NIST SP 800- 30 R1 risk assessment methodology, Step 1. prepare for the assessment, Step 2. conduct the assessment, Step 2a. identify threat sources, step 2b. identify potential threat events, step 2c. identify vulnerabilities and predisposing conditions, step 2d. determine likelihood, step 2e. determine impact, step 2f. risk determination, risk level matrix, risk levels, step 3. communicating and sharing risk assessment information, step 4. maintaining the risk assessment, and risk assessment activity. In Risk Treatment, you will learn about, risk mitigation, example control: passwords, control selection, residual risk, risk transference, risk avoidance, and risk acceptance. In audit Findings, you will learn about auditors, types of audits, audit methodologies, auditor responsibilities, audit scope, documentation, and response to audit.
Read more
Traffic lights
Traffic lights
Read about what's good
what should give you pause and
possible dealbreakers
Explores industry-standard methods for security management
Suitable for professionals in IT, cybersecurity, and other related fields
Taught by experts at (ISC)² Education & Training, a reputable organization in cybersecurity
Covers topics in risk identification, monitoring, analysis, incident response, and recovery
Provides hands-on experience through case studies and assignments
Requires students to have some prior knowledge in security concepts
Save this course
Create your own learning path.
Save this course to your list so you can find it easily later.
Save
Save
Reviews summary
Comprehensive risk and incident response overview
According to learners, this course offers a comprehensive and foundational overview of risk management and incident response. Students often highlight the clear lectures and logical structure, finding the material highly relevant for professional roles, particularly the actionable steps covered in the incident response and BCP/DRP modules. While generally well-received, some feel the delivery can be dry or that certain topics, like forensic investigation, lack sufficient depth, occasionally requiring external resources. A few wished for more practical labs or case studies beyond the final assignment to supplement the theoretical components. Overall, the course provides a solid base, though some specific technical discussions might feel slightly outdated.
Lecture style is perceived differently.
"The delivery was a bit dry."
"The course felt like a collection of bullet points from a textbook rather than engaging lectures."
"The lectures were clear and the examples were very helpful."
Content is applicable to real jobs.
"Highly relevant for my job."
"The incident response section was particularly strong and provided actionable steps."
"Solid content, especially the BCP/DRP sections."
Well-organized with clear explanations.
"The lectures were clear and the examples were very helpful."
"The structure was logical, building from basics to more complex ideas."
"Clearly explained and well-structured."
Covers key areas well for an overview.
"Excellent course material covering risk management principles and incident response frameworks thoroughly."
"Very comprehensive overview of risk identification and analysis."
"Fantastic foundational course for risk and incident handling."
Some specifics seem slightly old.
"Some of the monitoring tools discussion felt a little dated, but the core principles are timeless."
Could use more detail and hands-on elements.
"Some parts felt a bit theoretical, and I would have liked more practical labs or case studies besides the final one."
"I found some concepts weren't explained in enough depth, and I had to rely on external resources."
"...lacked depth in critical areas like forensic investigation detail."
Activities
Be better prepared
before
your course. Deepen your understanding
during
and
after
it. Supplement your coursework and achieve mastery of the topics covered
in Identifying, Monitoring, and Analyzing Risk and Incident Response and Recovery with these
activities:
Review the book 'Incident Response for Computer Security'
Show steps
Gain foundational knowledge and insights on incident response by reviewing this comprehensive book.
View
Incident Response & Computer Forensics, Third...
on Amazon
Show steps
-
Obtain a copy of the book.
-
Read the book thoroughly and take notes.
-
Reflect on the concepts and techniques discussed in the book.
Practice risk identification exercises
Show steps
Practice answering risk identification questions to improve your ability to identify risks effectively.
Show steps
-
Review the course material on risk identification.
-
Complete the practice questions provided in the course or textbook.
-
Create your own risk identification scenarios and practice identifying the risks.
Participate in a group discussion on incident response
Show steps
Engage in discussions with peers to share insights, experiences, and best practices on incident response.
Show steps
-
Find a group of peers to discuss incident response with.
-
Prepare topics or questions for discussion.
-
Actively participate in the discussion and share your perspectives.
Five other activities
Expand to see all activities and additional details
Show all eight activities
Create a security monitoring dashboard
Show steps
Create a dashboard to monitor and visualize security events to enhance your understanding of security monitoring systems.
Show steps
-
Identify the key security metrics you want to monitor.
-
Collect data from relevant sources.
-
Use a visualization tool to create the dashboard.
Contribute to an open-source incident response tool
Show steps
Enhance your technical skills and understanding of incident response by contributing to an open-source project.
Show steps
-
Find an open-source incident response tool that aligns with your interests.
-
Review the project documentation and identify areas where you can contribute.
-
Propose your contributions and collaborate with the project maintainers.
Attend an incident response workshop
Show steps
Attend an incident response workshop led by an expert trainer to acquire hands-on experience.
Show steps
-
Research and find an incident response workshop that aligns with your learning goals.
-
Register for the workshop.
-
Attend the workshop and actively participate in the exercises and discussions.
Develop an incident response plan for a specific organization
Show steps
Enhance your understanding of incident response planning by drafting a comprehensive plan.
Show steps
-
Identify the scope and objectives of the incident response plan.
-
Gather information about the organization's assets, threats, and vulnerabilities.
-
Develop procedures for incident detection, response, and recovery.
-
Test and validate the incident response plan.
Volunteer at a security operations center
Show steps
Gain practical experience by assisting in real-world security operations and incident response activities.
Show steps
-
Find a security operations center that offers volunteer opportunities.
-
Apply for the volunteer position.
-
Attend the necessary training and orientation.
-
Work under the guidance of experienced security professionals.
Review the book 'Incident Response for Computer Security'
Show steps
Gain foundational knowledge and insights on incident response by reviewing this comprehensive book.
View
Incident Response & Computer Forensics, Third...
on Amazon
Show steps
Show steps
Show steps
- Obtain a copy of the book.
- Read the book thoroughly and take notes.
- Reflect on the concepts and techniques discussed in the book.
Practice risk identification exercises
Show steps
Practice answering risk identification questions to improve your ability to identify risks effectively.
Show steps
Show steps
Show steps
- Review the course material on risk identification.
- Complete the practice questions provided in the course or textbook.
- Create your own risk identification scenarios and practice identifying the risks.
Participate in a group discussion on incident response
Show steps
Engage in discussions with peers to share insights, experiences, and best practices on incident response.
Show steps
Show steps
Show steps
- Find a group of peers to discuss incident response with.
- Prepare topics or questions for discussion.
- Actively participate in the discussion and share your perspectives.
Five other activities
Expand to see all activities and additional details
Show all eight activities
Create a security monitoring dashboard
Show steps
Create a dashboard to monitor and visualize security events to enhance your understanding of security monitoring systems.
Show steps
Show steps
Show steps
- Identify the key security metrics you want to monitor.
- Collect data from relevant sources.
- Use a visualization tool to create the dashboard.
Contribute to an open-source incident response tool
Show steps
Enhance your technical skills and understanding of incident response by contributing to an open-source project.
Show steps
Show steps
Show steps
- Find an open-source incident response tool that aligns with your interests.
- Review the project documentation and identify areas where you can contribute.
- Propose your contributions and collaborate with the project maintainers.
Attend an incident response workshop
Show steps
Attend an incident response workshop led by an expert trainer to acquire hands-on experience.
Show steps
Show steps
Show steps
- Research and find an incident response workshop that aligns with your learning goals.
- Register for the workshop.
- Attend the workshop and actively participate in the exercises and discussions.
Develop an incident response plan for a specific organization
Show steps
Enhance your understanding of incident response planning by drafting a comprehensive plan.
Show steps
Show steps
Show steps
- Identify the scope and objectives of the incident response plan.
- Gather information about the organization's assets, threats, and vulnerabilities.
- Develop procedures for incident detection, response, and recovery.
- Test and validate the incident response plan.
Volunteer at a security operations center
Show steps
Gain practical experience by assisting in real-world security operations and incident response activities.
Show steps
Show steps
Show steps
- Find a security operations center that offers volunteer opportunities.
- Apply for the volunteer position.
- Attend the necessary training and orientation.
- Work under the guidance of experienced security professionals.
Career center
Learners who complete Identifying, Monitoring, and Analyzing Risk and Incident Response and Recovery will develop knowledge and skills
that may be useful to these careers:
Forensic Analyst
Forensic Analyst
A Forensic Analyst collects, analyzes, and interprets digital evidence to support criminal investigations. This course can help build a foundation in forensic investigations, which is a critical skill for Forensic Analysts. The course covers topics such as evidence gathering, crime scene management, and incident response, which are all essential knowledge for success in this field.
Security Analyst
Security Analyst
A Security Analyst identifies, analyzes, and mitigates security risks to protect an organization's assets. This course can help build a strong foundation in risk management and incident response, which are key responsibilities for Security Analysts. The course covers topics such as risk assessment, security testing, and incident handling, which are all essential knowledge for success in this field.
Penetration Tester
Penetration Tester
A Penetration Tester identifies vulnerabilities in an organization's systems and networks by simulating attacks. This course can help build a strong foundation in security assessment, which is a critical skill for Penetration Testers. The course covers topics such as vulnerability scanning, penetration testing, and incident response, which are all essential knowledge for success in this field.
Incident Responder
Incident Responder
An Incident Responder investigates and resolves security incidents to minimize damage and downtime. This course can help build a strong foundation in incident response, which is a critical skill for Incident Responders. The course covers topics such as incident handling, forensics, and security analytics, which are all essential knowledge for success in this field.
Security Engineer
Security Engineer
A Security Engineer designs, implements, and maintains security systems to protect an organization's assets. This course can help build a strong foundation in security management, which is a critical skill for Security Engineers. The course covers topics such as risk management, security assessment, and incident response, which are all essential knowledge for success in this field.
Risk Manager
Risk Manager
A Risk Manager identifies, analyzes, and mitigates risks to an organization's assets. This course can help build a strong foundation in risk management, which is a critical skill for Risk Managers. The course covers topics such as risk assessment, risk treatment, and risk reporting, which are all essential knowledge for success in this field.
Compliance Auditor
Compliance Auditor
A Compliance Auditor ensures that an organization meets regulatory requirements. This course can help build a strong foundation in compliance, which is a critical skill for Compliance Auditors. The course covers topics such as risk assessment, security controls, and incident response, which are all essential knowledge for success in this field.
Business Continuity Planner
Business Continuity Planner
A Business Continuity Planner develops and implements plans to ensure that an organization can continue to operate during and after a disaster or other disruption. This course can help build a strong foundation in business continuity planning, which is a critical skill for Business Continuity Planners. The course covers topics such as risk assessment, disaster recovery, and incident response, which are all essential knowledge for success in this field.
Disaster Recovery Planner
Disaster Recovery Planner
A Disaster Recovery Planner develops and implements plans to ensure that an organization can recover from a disaster or other disruption. This course can help build a strong foundation in disaster recovery planning, which is a critical skill for Disaster Recovery Planners. The course covers topics such as risk assessment, business continuity, and incident response, which are all essential knowledge for success in this field.
Business Analyst
Business Analyst
A Business Analyst identifies and analyzes business needs and develops solutions to meet those needs. This course may be useful for Business Analysts who want to specialize in security or risk management.
Systems Analyst
Systems Analyst
A Systems Analyst designs, implements, and maintains computer systems to meet the needs of an organization. This course may be useful for Systems Analysts who want to specialize in security or risk management.
Network Administrator
Network Administrator
A Network Administrator manages and maintains computer networks to ensure that they are operating efficiently and securely. This course may be useful for Network Administrators who want to specialize in security or risk management.
Database Administrator
Database Administrator
A Database Administrator manages and maintains databases to ensure that they are operating efficiently and securely. This course may be useful for Database Administrators who want to specialize in security or risk management.
Software Developer
Software Developer
A Software Developer designs, develops, and maintains software applications. This course may be useful for Software Developers who want to specialize in security or risk management.
Information Security Manager
Information Security Manager
An Information Security Manager develops and implements security policies and procedures to protect an organization's assets. This course may be useful for Information Security Managers who want to specialize in risk management or incident response.
For more career information including salaries, visit:
OpenCourser.com/course/4bb949/identifying
Reading list
We've selected ten books
that we think will supplement your
learning. Use these to
develop background knowledge, enrich your coursework, and gain a
deeper understanding of the topics covered in
Identifying, Monitoring, and Analyzing Risk and Incident Response and Recovery .
The ISO 31000 family of standards provides guidance on risk management. provides a comprehensive overview of the risk management process, including risk identification, assessment, evaluation, and treatment.
Provides a comprehensive overview of incident response and recovery. It covers the entire incident response process, from preparation and response to recovery and follow-up.
This publication provides a comprehensive list of security and privacy controls for federal information systems and organizations. It valuable resource for anyone who is responsible for implementing security controls.
Provides a comprehensive overview of business continuity and disaster recovery planning for IT professionals. It covers the entire planning process, from risk assessment and mitigation to recovery and restoration.
This publication provides guidance on conducting risk assessments for information systems. It covers the entire risk assessment process, from planning and preparation to reporting and documentation.
Provides a practical guide to managing information security risks. It covers the entire risk management process, from risk identification and assessment to risk mitigation and monitoring.
This publication provides comprehensive guidance on computer security incident handling. It valuable resource for anyone who is responsible for handling security incidents.
Save
Provides a comprehensive overview of network security threats and vulnerabilities. It valuable resource for anyone who wants to learn more about how to protect their networks from attack.
Provides a comprehensive overview of security assessment techniques. It covers both offensive and defensive techniques, and it valuable resource for anyone who wants to learn more about how to protect their systems from attack.
Provides a comprehensive overview of digital forensics. It covers the entire digital forensics process, from evidence collection and preservation to analysis and reporting.
For more information about how these books relate to this course, visit:
OpenCourser.com/course/4bb949/identifying
Share
Similar courses
Similar courses are unavailable at this time. Please try again later.
Level
Introductory
Via
Coursera
Institution
ISC2
Instructor
(ISC)² Education & Training
Language
English
Transcripts
Español
Français
Português
Deutsch
Italiano
中文
العربية
한국어
日本語
हिंदी
Nederlands
Svenska
Pусский
Türkçe
Polski
Ελληνικά
українська мова
Bahasa Indonesia
ไทย
қазақша
This course belongs to a
collection
called
(ISC)² Systems Security Certified Practitioner (SSCP) . It's comprised of six courses:
- Security Operations and Administration
- Identifying, Monitoring, and Analyzing Risk and Incident Response and Recovery (viewing)
- Cryptography
- Access Controls
- Systems and Application Security
- Networks and Communications Security
Our mission
OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.
Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.
Find this site helpful? Tell a friend about us.
Affiliate disclosure
We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.
Your purchases help us maintain our catalog and keep our servers humming without ads.
Thank you for supporting OpenCourser.
© 2016 - 2025 OpenCourser