We may earn an affiliate commission when you visit our partners.

Security and Risk Management

Concepts and Principles for CISSP®

This course will teach you the foundational concepts of security and risk management that are essential elements of an information security program..

Information security programs are based on a foundation of risk management. It is essential to be familiar with the concepts of risk management. In this course, Security and Risk Management: Concepts and Principles for CISSP®, you’ll learn to build a core understanding of risk and security. First, you’ll explore information security governance and regulations. Next, you’ll discover information security principles. Finally, you’ll learn how to perform risk management and threat modelling. When you’re finished with this course, you’ll have the skills and knowledge of information security needed for the CISSP® examination.

Enroll now

Or start your subscription today

And complete this course over a free trial

Here's a deal for you

We found an offer that may be relevant to this course.

Save money when you learn. All coupon codes, vouchers, and discounts are applied automatically unless otherwise noted.

Valid for a limited time only

Future-proof your career

Access O'Reilly books, live events, courses, and more. Save with an annual subscription.

Take

15%

off

What's inside

Syllabus

Course Overview

Foundational Information Security Concepts

Foundational Information Security Concepts Continued

Security Governance Principles

Information Security Legal and Regulatory Issues

Legal and Investigation Types

Risk and Threat Modeling

Risk Management

Risk Treatment/Response

Supply Chain Risk Management

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Provides a solid foundation in security and risk management concepts for the CISSP® exam

Led by an experienced instructor, Kevin Henry, recognized for their expertise in information security

Covers the foundational concepts of information security, risk management, and threat modeling

Provides a comprehensive overview of information security governance and regulations

Emphasizes the importance of legal considerations in information security

Save this course

Save Security and Risk Management: Concepts and Principles for CISSP® to your list so you can find it easily later:

Save

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Security and Risk Management: Concepts and Principles for CISSP® with these activities:

Attend a local security meetup or conference

Show steps

This activity will help you to connect with other security professionals.

Browse courses on Networking

Show steps

Find a local security meetup or conference.
Attend the event.
Network with other attendees.

Practice answering CISSP exam questions

Show steps

This activity will help you to prepare for the CISSP exam.

Browse courses on CISSP

Show steps

Find a practice exam or question bank.
Answer the questions under timed conditions.
Review your answers and identify areas where you need to improve.

Complete the SANS Institute's Information Security Essentials course

Show steps

Enhance your foundational understanding of information security and risk management concepts, which can provide a solid base for further learning in the course.

Browse courses on Security Essentials

Show steps

Enroll in the SANS Institute's Information Security Essentials course.
Complete the course modules and engage with the discussion forums.
Apply the knowledge gained to strengthen your understanding of the course concepts.

Seven other activities

Expand to see all activities and additional details

Show all ten activities

Follow a tutorial on how to use a security tool

Show steps

This activity will help you to learn how to use a new security tool.

Browse courses on Security Tools

Show steps

Find a tutorial on how to use a security tool.
Follow the steps in the tutorial.
Practice using the tool.

Review NIST SP 800-53 Revision 5

Show steps

Reviewing this document will solidify your understanding of the security controls that are essential for protecting federal information systems.

View Enhancing the Resilience of the Nation's... on Amazon

Show steps

Read the document thoroughly.
Identify the key security controls for each of the 18 control families.
Understand the implementation guidance for each control.

Participate in a cybersecurity hackathon

Show steps

Practice applying the principles of risk and security management in a simulated real-world environment, which can help you better understand and retain the concepts taught in the course.

Browse courses on Hacking

Show steps

Identify and register for a relevant cybersecurity hackathon.
Form a team or work independently to address the challenges presented in the hackathon.
Apply risk and security management principles to assess vulnerabilities and develop mitigation strategies.

Conduct a risk assessment for a small-scale network

Show steps

This activity will give you hands-on experience in conducting a risk assessment and developing a plan to mitigate risks.

Browse courses on Risk Assessment

Show steps

Choose a small-scale network to assess.
Identify the assets on the network.
Identify the threats to the network.
Assess the risks to the network.
Develop a plan to mitigate the risks.

Build a small-scale cybersecurity system

Show steps

This project will give you hands-on experience in designing and implementing a cybersecurity system.

Browse courses on network security

Show steps

Choose a small-scale network to protect, such as a home network or a small business network.
Research and select the appropriate security tools and technologies.
Design and implement the cybersecurity system.
Test the cybersecurity system to ensure that it is working properly.

Create a blog post or article about a security risk you have identified

Show steps

This activity will help you to develop your critical thinking skills and your ability to communicate complex technical information.

Browse courses on Risk Assessment

Show steps

Identify a security risk that you have identified.
Research the risk and its potential impact.
Develop recommendations for mitigating the risk.
Write a blog post or article about the risk and your recommendations.

Attend a cybersecurity workshop

Show steps

This activity will help you to learn about a specific cybersecurity topic.

Browse courses on Cybersecurity

Show steps

Find a cybersecurity workshop that is relevant to your interests.
Attend the workshop.
participer in the activities and discussions.

Career center

Learners who complete Security and Risk Management: Concepts and Principles for CISSP® will develop knowledge and skills that may be useful to these careers:

Information Security Analyst

Information Security Analysts design, implement, and maintain security measures to protect an organization's computer networks and systems. They implement Security Governance Principles and tailor them to meet their organization's needs. They also use their knowledge of Investigation Types, Risk Assessment, and Threat Modeling to keep their organization's information secure. This course, Security and Risk Management: Concepts and Principles for CISSP®, would be highly valuable for someone in this role as it provides a strong foundation in all of these areas.

See salaries and explore the career path for Information Security Analyst

Information Security Manager

Information Security Managers are responsible for the overall security of an organization's information systems. They develop and implement security policies and procedures, and oversee the implementation of security measures. They also work with other departments to ensure that security is integrated into all aspects of the organization's operations. Someone in this role would find this course, Security and Risk Management: Concepts and Principles for CISSP®, to be very helpful. It can help them develop the skills and knowledge they need to be successful in their role, such as how to conduct Risk Management and Threat Modelling.

See salaries and explore the career path for Information Security Manager

IT Auditor

IT Auditors evaluate the security of an organization's information systems and make recommendations for improvements. They also conduct risk assessments and compliance audits. Being able to demonstrate knowledge of auditing and risk management is important for an IT Auditor, which makes this course, Security and Risk Management: Concepts and Principles for CISSP®, a good choice.

See salaries and explore the career path for IT Auditor

Security Consultant

Security Consultants provide advice and guidance to organizations on how to improve their security posture. They also help organizations to develop and implement security plans and procedures. Security Consultants may also provide expert testimony in court cases involving computer security.

See salaries and explore the career path for Security Consultant

Network Security Engineer

Network Security Engineers design, implement, and maintain the security of an organization's computer networks. They also monitor network traffic for suspicious activity and respond to security incidents. This course may be useful for Network Security Engineers as it provides a good overview of security concepts and principles.

See salaries and explore the career path for Network Security Engineer

Security Architect

Security Architects design and implement the security architecture for an organization's information systems. They also work with other departments to ensure that security is integrated into all aspects of the organization's operations. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be helpful for Security Architects as it provides a good overview of security concepts and principles.

See salaries and explore the career path for Security Architect

Chief Information Security Officer (CISO)

The Chief Information Security Officer (CISO) is responsible for the overall security of an organization's information systems. They develop and implement security policies and procedures, and oversee the implementation of security measures. They also work with other departments to ensure that security is integrated into all aspects of the organization's operations. A CISO would greatly benefit from this course, Security and Risk Management: Concepts and Principles for CISSP®, as it provides a strong foundation in all of the areas they are responsible for.

See salaries and explore the career path for Chief Information Security Officer (CISO)

Security Analyst

Security Analysts monitor and analyze security data to identify and respond to security threats. They also conduct vulnerability assessments and penetration tests. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be beneficial for Security Analysts as it can provide them a good overview of security concepts and principles.

See salaries and explore the career path for Security Analyst

Compliance Analyst

Compliance Analysts ensure that an organization's information systems are in compliance with applicable laws and regulations. They also conduct risk assessments and compliance audits. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be helpful for a Compliance Analyst as it gives a deep dive into Legal and Investigation Types and Risk Management. This course will give you a strong foundation in the skills and knowledge you need to be successful in this role.

See salaries and explore the career path for Compliance Analyst

Incident Responder

Incident Responders are responsible for responding to security incidents. They also develop and implement incident response plans. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be helpful for Incident Responders as it provides a good overview of security concepts and principles.

See salaries and explore the career path for Incident Responder

Penetration Tester

Penetration Testers identify and exploit vulnerabilities in an organization's computer systems. They also provide recommendations for how to fix the vulnerabilities. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be helpful for Penetration Testers as it provides a good overview of security concepts and principles.

See salaries and explore the career path for Penetration Tester

Cybersecurity Engineer

Cybersecurity Engineers design and implement security measures to protect an organization's computer networks and systems. They also monitor network traffic for suspicious activity and respond to security incidents. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be helpful for Cybersecurity Engineers as it provides a good overview of security concepts and principles.

See salaries and explore the career path for Cybersecurity Engineer

Privacy Analyst

Privacy Analysts develop and implement privacy policies and procedures. They also conduct privacy impact assessments. A Privacy Analyst may find this course, Security and Risk Management: Concepts and Principles for CISSP®, to be beneficial to them as it gives a strong foundation in Information Security Legal and Regulatory Issues.

See salaries and explore the career path for Privacy Analyst

Risk Manager

Risk Managers identify and assess risks to an organization's information systems. They also develop and implement risk management plans. This course, Security and Risk Management: Concepts and Principles for CISSP®, will teach the foundational elements of risk management that are essential for a Risk Manager. It will also provide you with the skills and knowledge you need to be successful in your role.

See salaries and explore the career path for Risk Manager

Compliance Manager

Compliance Managers ensure that an organization's information systems are in compliance with applicable laws and regulations. They also conduct risk assessments and compliance audits. This course, Security and Risk Management: Concepts and Principles for CISSP®, is a good choice for Compliance Managers because it provides a strong foundation in the skills and knowledge they need to be successful in their role, such as how to conduct Risk Management and how to understand Legal and Investigation Types.

See salaries and explore the career path for Compliance Manager

Reading list

We've selected 14 books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in Security and Risk Management: Concepts and Principles for CISSP®.

(ISC)2 CISSP Certified Information Systems Security...

Save

Is considered the canonical text for the CISSP certification. Essential for learners who plan on taking the CISSP exam, it provides a comprehensive overview of security and risk management principles.

Security and Risk Management

Concepts and Principles for CISSP®

Here's a deal for you

What's inside

Syllabus

Good to know

Save this course

Activities

Career center

Reading list

Share

Similar courses