IT Risk Management

Risk management is the identification, assessment, and prioritization of risks followed by the coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events or to maximize the realization of opportunities.

This course is built around globally accepted standards such as ISO 31000:2009 and frameworks such as ISACA’s Risk IT, and NIST and OCTAVE guidelines for risk management.

Upon completion of this course, participants will be able to:

• Identify where and how to reduce known/unknown IT risks
• Identify areas of cost-benefit optimization and thus reduce IT expenditure
• Understand the ISO 31000:2009 standard and its applicability to the corporate environment
• Understand risk assessment as addressed in BASEL II, ISO 20000, ISO 27001, ITIL, COSO, COBIT, BS 25999 and its relevance to IT
• Understand the different IT Risk Assessment Standards, Models and Methodologies – NIST’s SP-800-30, and OCTAVE™, ISO 27005
• Insights on the practical use of risk assessment and control evaluation techniques

This course is intended for professionals involved in managing, assessing, or mitigating IT and information security risks, including:

• IT Risk Managers and Risk Analysts responsible for identifying and evaluating IT risks
• Information Security Professionals and Cybersecurity Specialists
• IT Managers and IT Governance Professionals
• Compliance Officers and Internal Auditors working with standards and regulatory frameworks
• Business Continuity and Disaster Recovery Professionals
• IT Consultants involved in risk assessment and enterprise risk management
• Project Managers overseeing IT systems, infrastructure, or security projects
• Professionals preparing for roles aligned with frameworks such as ISO 31000, ISO 27001, COBIT, ITIL, and NIST
• Decision-makers responsible for aligning IT risk strategies with business objectives