We may earn an affiliate commission when you visit our partners.

Security and Risk Management

Concepts and Principles for CISSP®

Kevin Henry

This course will teach you the foundational concepts of security and risk management that are essential elements of an information security program..

Information security programs are based on a foundation of risk management. It is essential to be familiar with the concepts of risk management. In this course, Security and Risk Management: Concepts and Principles for CISSP®, you’ll learn to build a core understanding of risk and security. First, you’ll explore information security governance and regulations. Next, you’ll discover information security principles. Finally, you’ll learn how to perform risk management and threat modelling. When you’re finished with this course, you’ll have the skills and knowledge of information security needed for the CISSP® examination.

Enroll now

Or start your subscription today

And complete this course over a free trial

What's inside

Syllabus

Course Overview

Foundational Information Security Concepts

Foundational Information Security Concepts Continued

Security Governance Principles

Information Security Legal and Regulatory Issues

Legal and Investigation Types

Risk and Threat Modeling

Risk Management

Risk Treatment/Response

Supply Chain Risk Management

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Provides a solid foundation in security and risk management concepts for the CISSP® exam

Led by an experienced instructor, Kevin Henry, recognized for their expertise in information security

Covers the foundational concepts of information security, risk management, and threat modeling

Provides a comprehensive overview of information security governance and regulations

Emphasizes the importance of legal considerations in information security

Save this course

Save Security and Risk Management: Concepts and Principles for CISSP® to your list so you can find it easily later:

Save

Activities

Coming soon We're preparing activities for Security and Risk Management: Concepts and Principles for CISSP®. These are activities you can do either before, during, or after a course.

Career center

Learners who complete Security and Risk Management: Concepts and Principles for CISSP® will develop knowledge and skills that may be useful to these careers:

Information Security Analyst

Information Security Analysts design, implement, and maintain security measures to protect an organization's computer networks and systems. They implement Security Governance Principles and tailor them to meet their organization's needs. They also use their knowledge of Investigation Types, Risk Assessment, and Threat Modeling to keep their organization's information secure. This course, Security and Risk Management: Concepts and Principles for CISSP®, would be highly valuable for someone in this role as it provides a strong foundation in all of these areas.

See salaries and explore the career path for Information Security Analyst

Information Security Manager

Information Security Managers are responsible for the overall security of an organization's information systems. They develop and implement security policies and procedures, and oversee the implementation of security measures. They also work with other departments to ensure that security is integrated into all aspects of the organization's operations. Someone in this role would find this course, Security and Risk Management: Concepts and Principles for CISSP®, to be very helpful. It can help them develop the skills and knowledge they need to be successful in their role, such as how to conduct Risk Management and Threat Modelling.

See salaries and explore the career path for Information Security Manager

IT Auditor

IT Auditors evaluate the security of an organization's information systems and make recommendations for improvements. They also conduct risk assessments and compliance audits. Being able to demonstrate knowledge of auditing and risk management is important for an IT Auditor, which makes this course, Security and Risk Management: Concepts and Principles for CISSP®, a good choice.

See salaries and explore the career path for IT Auditor

Security Consultant

Security Consultants provide advice and guidance to organizations on how to improve their security posture. They also help organizations to develop and implement security plans and procedures. Security Consultants may also provide expert testimony in court cases involving computer security.

See salaries and explore the career path for Security Consultant

Network Security Engineer

Network Security Engineers design, implement, and maintain the security of an organization's computer networks. They also monitor network traffic for suspicious activity and respond to security incidents. This course may be useful for Network Security Engineers as it provides a good overview of security concepts and principles.

See salaries and explore the career path for Network Security Engineer

Security Architect

Security Architects design and implement the security architecture for an organization's information systems. They also work with other departments to ensure that security is integrated into all aspects of the organization's operations. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be helpful for Security Architects as it provides a good overview of security concepts and principles.

See salaries and explore the career path for Security Architect

Chief Information Security Officer (CISO)

The Chief Information Security Officer (CISO) is responsible for the overall security of an organization's information systems. They develop and implement security policies and procedures, and oversee the implementation of security measures. They also work with other departments to ensure that security is integrated into all aspects of the organization's operations. A CISO would greatly benefit from this course, Security and Risk Management: Concepts and Principles for CISSP®, as it provides a strong foundation in all of the areas they are responsible for.

See salaries and explore the career path for Chief Information Security Officer (CISO)

Security Analyst

Security Analysts monitor and analyze security data to identify and respond to security threats. They also conduct vulnerability assessments and penetration tests. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be beneficial for Security Analysts as it can provide them a good overview of security concepts and principles.

See salaries and explore the career path for Security Analyst

Compliance Analyst

Compliance Analysts ensure that an organization's information systems are in compliance with applicable laws and regulations. They also conduct risk assessments and compliance audits. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be helpful for a Compliance Analyst as it gives a deep dive into Legal and Investigation Types and Risk Management. This course will give you a strong foundation in the skills and knowledge you need to be successful in this role.

See salaries and explore the career path for Compliance Analyst

Incident Responder

Incident Responders are responsible for responding to security incidents. They also develop and implement incident response plans. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be helpful for Incident Responders as it provides a good overview of security concepts and principles.

See salaries and explore the career path for Incident Responder

Penetration Tester

Penetration Testers identify and exploit vulnerabilities in an organization's computer systems. They also provide recommendations for how to fix the vulnerabilities. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be helpful for Penetration Testers as it provides a good overview of security concepts and principles.

See salaries and explore the career path for Penetration Tester

Cybersecurity Engineer

Cybersecurity Engineers design and implement security measures to protect an organization's computer networks and systems. They also monitor network traffic for suspicious activity and respond to security incidents. This course, Security and Risk Management: Concepts and Principles for CISSP®, may be helpful for Cybersecurity Engineers as it provides a good overview of security concepts and principles.

See salaries and explore the career path for Cybersecurity Engineer

Privacy Analyst

Privacy Analysts develop and implement privacy policies and procedures. They also conduct privacy impact assessments. A Privacy Analyst may find this course, Security and Risk Management: Concepts and Principles for CISSP®, to be beneficial to them as it gives a strong foundation in Information Security Legal and Regulatory Issues.

See salaries and explore the career path for Privacy Analyst

Risk Manager

Risk Managers identify and assess risks to an organization's information systems. They also develop and implement risk management plans. This course, Security and Risk Management: Concepts and Principles for CISSP®, will teach the foundational elements of risk management that are essential for a Risk Manager. It will also provide you with the skills and knowledge you need to be successful in your role.

See salaries and explore the career path for Risk Manager

Compliance Manager

Compliance Managers ensure that an organization's information systems are in compliance with applicable laws and regulations. They also conduct risk assessments and compliance audits. This course, Security and Risk Management: Concepts and Principles for CISSP®, is a good choice for Compliance Managers because it provides a strong foundation in the skills and knowledge they need to be successful in their role, such as how to conduct Risk Management and how to understand Legal and Investigation Types.

See salaries and explore the career path for Compliance Manager

Reading list

We've selected 14 books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in Security and Risk Management: Concepts and Principles for CISSP®.

(ISC)2 CISSP Certified Information Systems Security...