Have you ever wondered why your organization's executives or your manager made a decision to fund or not fund your project?
Read more
Have you ever wondered why your organization's executives or your manager made a decision to fund or not fund your project?
Have you ever wondered why your organization's executives or your manager made a decision to fund or not fund your project?
In this course, you will get an inside look at how cybersecurity and information technology (IT) managers determine which projects they will support with funding, and which they won't, based on a preliminary risk analysis. Over the past two decades, I have worked in the cybersecurity and information technology realm, fighting for my projects to be funded. Early in my career, I didn't understand why certain projects would be funded and executed, while others wouldn't. What I learned, is that it all came down to Risk Management by our executives and managers.
You will learn the terms used by executives and managers in discussing Risk Management, and how to apply the concepts of Risk Management to your networks, systems, and projects. This course is not an operational or tactical course that focuses on how you will secure your networks, but instead focuses on the mindset of managers and teaches you how to think like they do. Once you master these concepts, it is much easier to build your business case for your projects and justify your budgetary needs.
Throughout this course, we will discuss what comprises Risk (assets, threats, and vulnerabilities), providing numerous real-world examples along the way. We will also cover Qualitative and Quantitative Risk Measurements, showing how you can calculate the risk of an uncertainty due to vulnerabilities and threats.
This course also includes two case studies of what happens when risk management fails, as demonstrated by the Amazon Web Services outage and Equifax data breach that both occurred in 2017. You will learn to better understand these scenarios, what caused the outage/breach, and why managers may have made the decisions they did that led up to them.
Upon completion of this course, you will earn 3 CEUs towards the renewal of your CompTIA A+, Network+, Security+, Linux+, Cloud+, PenTest+, CySA+, or CASP+ certifications.
What's inside
Learning objectives
- Understand the foundations of risk management in the cybersecurity and information technology field
- Be able to use qualitative risk measurement techniques when discussing networks and projects
- Be able to use quantitative risk measurement techniques when discussing networks and projects
- Discuss current events in the technology space in relation to risk management decisions
- Understand the foundations of risk management in the cybersecurity and information technology field
- Be able to use qualitative risk measurement techniques when discussing networks and projects
- Be able to use quantitative risk measurement techniques when discussing networks and projects
- Discuss current events in the technology space in relation to risk management decisions
Syllabus
Introduction
This video contains a short introduction from your instructor, Jason.
This lesson includes the downloadable study guide as a resource for your offline studies and note taking.
Read more
Syllabus
This video contains a short introduction from your instructor, Jason.
This lesson includes the downloadable study guide as a resource for your offline studies and note taking.
In this lecture, we will discuss the three major components of risk: assets, vulnerabilities, and threats.
In this lecture, you will learn the different types of risk that exist in the business world and in our IT networks.
In this lesson, we will discuss the different types of threats that our networks and businesses face.
In this lecture, we will breakdown what happens when Risk Management fails by examining the Amazon Web Services outage from 2017 that took down nearly the entire East Coast region!
In this video, we will introduce the concepts of mitigating, transferring, avoiding, and accepting risk.
In this video, we will dive deeper into the concept of Risk Mitigation.
In this video, we will dive deeper into the concept of Risk Transference.
In this video, we will dive deeper into the concept of Risk Avoidance.
In this video, we will dive deeper into the concept of Risk Acceptance.
In this video, we will discuss how risk controls are selected.
In this lesson, we will take a small detour into the world of project management (PMP and PRINCE2) to discuss additional risk responses that are available beyond the four basics we discussed above.
In this lesson, you will learn the different types of ways to calculate risk.
In this video, we will discuss the qualitative risk measurement methods.
In this video, we will discuss the quantitative risk measurement methods.
In this video, we will discuss the Equifax data breach of July 2017, what led up to it, and the management decisions that could have prevented it.
In this short video, students will receive an introduction to this section of interviews with industry professionals in the Government, Defense, Commercial, and Health Care sectors and how they implement Risk Management in the Real World.
In this video, Jason interviews Mr. Randy Fuller who worked in the Government sector. Mr. Fuller's organization spans across 6 continents and hundreds of thousands of users.
In this video, Jason interviews Mr. Corey Charles who works as an IT Manager in the Vulnerability Management space in the Government sector. Mr. Charles' organization spans across 6 states and thousands of users.
In this video, Jason interviews Mr. David Anderson, the Director of Information Security Operations for a major health care provider in the United States. His organization spans 46 hospitals across numerous states, and gives us a unique inside look at how decisions made decades ago can still affect the risk posture of our networks today. (The audio quality is not the greatest, unfortunately, as we had to record it over a phone line connection, but it is well worth listening to because the discussion he provides us is outstanding!)
In this interview, we talk with Tu Laniyonu who works in the Government Sector as a digital forensic examiner working on cases of suspected insider threats.
In this video, we will provide a short conclusion and summary of the course.
Traffic lights
Save this course
Save
Reviews summary
Strategic risk for it management
Offers valuable CEUs for various CompTIA certifications.
Features practical examples and insightful industry interviews.
Cultivates a manager's approach to cybersecurity and IT risk.
Activities
Review Course Objectives
Show steps
Help familiarize yourself with concepts and identify areas of focus.
Browse courses on
Risk Management
Show steps
-
Read the course syllabus.
-
Review the course description.
Join a Cybersecurity Risk Management Study Group
Show steps
Collaborate with peers to discuss concepts, share insights, and answer questions.
Browse courses on
Risk Management
Show steps
-
Find a study group or create your own.
-
Set regular meeting times and discuss course materials.
Complete the SANS Risk Management for IT Professionals Tutorial
Show steps
Gain structured guidance and deeper understanding of risk management principles.
Browse courses on
Risk Management
Show steps
-
Enroll in the SANS Risk Management for IT Professionals Tutorial.
-
Complete the interactive modules and exercises.
Five other activities
Expand to see all activities and additional details
Show all eight activities
Attend a Risk Management Workshop
Show steps
Engage with experts and practitioners to clarify concepts and learn best practices.
Browse courses on
Risk Management
Show steps
-
Search for relevant risk management workshops.
-
Register and attend the workshop.
Solve Risk Management Case Studies
Show steps
Apply concepts to real-world scenarios to test understanding and decision-making skills.
Browse courses on
Case Studies
Show steps
-
Find risk management case studies online or in textbooks.
-
Analyze the case and identify risks.
-
Develop and evaluate mitigation strategies.
Create a Cybersecurity Risk Assessment Report
Show steps
Reinforce understanding of risk analysis methods and documentation.
Browse courses on
Risk Management
Show steps
-
Identify assets, threats, and vulnerabilities.
-
Assess likelihood and impact of risks.
-
Write an executive summary and recommendations.
Contribute to Risk Management Open Source Projects
Show steps
Gain practical experience and contribute to the community while solidifying understanding.
Browse courses on
Open Source
Show steps
-
Identify open source risk management projects.
-
Review the code and documentation.
-
Suggest improvements or contribute code.
Develop a Risk Management Plan for a Small Business
Show steps
Integrate knowledge into a comprehensive plan that demonstrates practical application.
Browse courses on
Risk Management Plan
Show steps
-
Identify business goals and objectives.
-
Conduct a risk assessment.
-
Develop risk mitigation strategies.
-
Create a risk management plan document.
Review Course Objectives
Show steps
Help familiarize yourself with concepts and identify areas of focus.
Browse courses on
Risk Management
Show steps
- Read the course syllabus.
- Review the course description.
Join a Cybersecurity Risk Management Study Group
Show steps
Collaborate with peers to discuss concepts, share insights, and answer questions.
Browse courses on
Risk Management
Show steps
- Find a study group or create your own.
- Set regular meeting times and discuss course materials.
Complete the SANS Risk Management for IT Professionals Tutorial
Show steps
Gain structured guidance and deeper understanding of risk management principles.
Browse courses on
Risk Management
Show steps
- Enroll in the SANS Risk Management for IT Professionals Tutorial.
- Complete the interactive modules and exercises.
Attend a Risk Management Workshop
Show steps
Engage with experts and practitioners to clarify concepts and learn best practices.
Browse courses on
Risk Management
Show steps
- Search for relevant risk management workshops.
- Register and attend the workshop.
Solve Risk Management Case Studies
Show steps
Apply concepts to real-world scenarios to test understanding and decision-making skills.
Browse courses on
Case Studies
Show steps
- Find risk management case studies online or in textbooks.
- Analyze the case and identify risks.
- Develop and evaluate mitigation strategies.
Create a Cybersecurity Risk Assessment Report
Show steps
Reinforce understanding of risk analysis methods and documentation.
Browse courses on
Risk Management
Show steps
- Identify assets, threats, and vulnerabilities.
- Assess likelihood and impact of risks.
- Write an executive summary and recommendations.
Contribute to Risk Management Open Source Projects
Show steps
Gain practical experience and contribute to the community while solidifying understanding.
Browse courses on
Open Source
Show steps
- Identify open source risk management projects.
- Review the code and documentation.
- Suggest improvements or contribute code.
Develop a Risk Management Plan for a Small Business
Show steps
Integrate knowledge into a comprehensive plan that demonstrates practical application.
Browse courses on
Risk Management Plan
Show steps
- Identify business goals and objectives.
- Conduct a risk assessment.
- Develop risk mitigation strategies.
- Create a risk management plan document.
Career center
Risk Manager
Chief Risk Officer (CRO)
Chief Information Security Officer (CISO)
Security Architect
Cybersecurity Analyst
Security Consultant
Risk Consultant
IT Manager
Project Manager
Information Security Analyst
Compliance Consultant
IT Auditor
Business Analyst
Compliance Manager
Privacy Officer
Reading list
Save
Share
Similar courses
OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.
Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.
Find this site helpful? Tell a friend about us.
We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.
Your purchases help us maintain our catalog and keep our servers humming without ads.
Thank you for supporting OpenCourser.
