Cyber Security Risk Assessment Training

Course 2013 Advantage Plan Course

Duration: 4 days
Language: English
Level: Foundation

This risk assessment training course will teach you how to conduct a security risk assessment to protect your organisation. You will learn about the laws and regulations that impose strict cybersecurity requirements on all organisations. You will also gain the skills to develop a compliance assessment plan and employ a standards-based risk management process while maintaining a satisfactory security posture.

Cyber Security Risk Assessment Training Delivery Methods

In-Person
Online

Cyber Security Risk Assessment & Management Training Information

In this Cyber Security Risk Assessment & Management training, you will learn how to:

Implement standards-based, proven methodologies for assessing and managing your organisation's information infrastructure risks.
Select and implement security controls that ensure compliance with applicable laws, regulations, policies, and directives.
Extend security protection to ICS (Industrial Control Systems) and the cloud.

Risk Assessment Training Prerequisites

Attendees should have a basic knowledge of business processes and technology concepts. No specialised technical knowledge is assumed.

Cyber Security Risk Assessment Training Course Outline

Module 1: Introduction to Risk Assessment and Management

Ensuring compliance with applicable regulatory drivers
Protecting the organisation from unacceptable losses
Describing the RMF (Risk Management Framework)
Applying NIST/ISO risk management processes

Module 2: Characterising System Security Requirements

Defining the system

Outlining the system security boundary
Pinpointing system interconnections
Incorporating the unique characteristics of Industrial Control Systems and cloud-based systems

Identifying security risk components

Estimating the impact of compromises on confidentiality, integrity, and availability
Adopting the appropriate model for categorising system risk

Setting the stage for successful risk management

Documenting critical risk assessment and management decisions in the SSP (System Security Plan)
Appointing qualified individuals to risk governance roles

Module 3: Selecting Appropriate Security Controls

Assigning a security control baseline

Investigating security control families
Determining the baseline from system security risk

Tailoring the baseline to fit the system

Examining the structure of security controls, enhancements, and parameters
Binding control overlays to the selected baseline
Gauging the need for enhanced assurance
Distinguishing system-specific, compensating, and non-applicable controls

Module 4: Reducing Risk Through Effective Control Implementation

Specifying the implementation approach

Maximising security effectiveness by "building in" security
Reducing residual risk in legacy systems via "bolt-on" security elements

Applying NIST/ISO controls

Enhancing system robustness through the selection of evaluated and validated components
Coordinating implementation approaches to administrative, operational, and technical controls
Providing evidence of compliance through supporting artefacts

Module 5: Assessing Compliance Scope and Depth

Developing an assessment plan

Prioritising depth of control assessment
Optimising validation through sequencing and consolidation
Verifying compliance through tests, interviews, and examinations

Formulating an authorisation recommendation

Evaluating overall system security risk
Mitigating residual risks
Publishing the POA&M (Plan of Action and Milestones), the risk assessment, and the recommendation

Module 6: Authorising System Operation

Aligning authority and responsibility

Quantifying organisational risk tolerance
Elevating authorisation decisions in high-risk scenarios

Forming a risk-based decision

Appraising system operational impact
Weighing residual risk against operational utility
Issuing ATO (Authority to Operate)

Module 7: Maintaining Continued Compliance

Justifying continuous reauthorisation

Measuring the impact of changes on the system security posture
Executing effective configuration management
Performing periodic control reassessment

Preserving an acceptable security posture

Delivering initial and routine follow-up security awareness training
Collecting ongoing security metrics
Implementing vulnerability management, incident response, and business continuity processes

Commercial Pricing

£2,650

4-day instructor-led training course
Learning Tree end-of-course exam included
One-on-one after-course instructor coaching

Would you like to take this course as a team?

Include dates with afternoon start times

May 5 - 8 2:00 PM - 9:30 PM BST

New York or Virtual
May 26 - 29 9:00 AM - 4:30 PM BST

London or Virtual
Jun 23 - 26 2:00 PM - 9:30 PM BST

Herndon, VA or Virtual
Aug 4 - 7 2:00 PM - 9:30 PM BST

New York or Virtual
Aug 11 - 14 9:00 AM - 4:30 PM BST

London or Virtual
Sep 22 - 25 2:00 PM - 9:30 PM BST

Herndon, VA or Virtual
Nov 3 - 6 2:00 PM - 9:30 PM GMT

New York or Virtual
Nov 10 - 13 9:00 AM - 4:30 PM GMT

London or Virtual
Dec 15 - 18 2:00 PM - 9:30 PM GMT

Herndon, VA or Virtual
Feb 2 - 5 2:00 PM - 9:30 PM GMT

New York or Virtual
Mar 22 - 25 1:00 PM - 8:30 PM GMT

Herndon, VA or Virtual

Scroll to view additional course dates

Speak with a Learning Consultant

Inquiring For

Myself

Team/Group

First Name*

Last Name*

Email*

Phone Number*

Company*

Job Title

I'm interested In

* Required Fields

Speak with a Learning Consultant

Fill out the form below or call 44 (0) 207 874 5000

Inquiring For

Myself

Team/Group

First Name*

Last Name*

Email*

Phone Number*

Company*

Job Title

I'm interested In

* Required Fields

Need Help Finding The Right Training Solution?

Our training advisors are here for you.

Cyber Security Risk Assessment & Management Training FAQs

Going through the process of identifying, analysing, and evaluating risk. It helps to guarantee that the cybersecurity controls you choose are suitable for your organisation's risks.

Information security risk management is a process of managing risks associated with using information technology.

Yes! We know your busy work schedule may prevent you from getting to one of our classrooms, which is why we offer convenient online training to meet your needs wherever you want. This course is available in class and live online.