|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/risk-management-threat-modeling
课程评论：没有评论
课程名称：风险管理导论 课程概述：在本课程中，您将学习风险评估技术以及如何实施多种策略以确保资产的保护。课程将深入探讨资产、脆弱性、威胁和风险之间的关系，并结合多个行业案例研究来说明所学内容。完成课程后，您将掌握与威胁建模和业务连续性规划相关的技能，这些技能在您的当前工作或未来职业中具有直接应用。 课程大纲： 1. 风险评估 - 描述：本模块将帮助您理解什么是风险以及风险可能依赖的多种因素。我们将列出并描述可以帮助您更好理解风险环境的风险评估技术，并讨论如何将识别出的风险呈现给领导层以促进更好的决策。 2. 风险管理 - 描述：在模块二中，您将学习如何管理识别出的风险。将介绍三种控制类别以及风险管理框架（RMF）的六个步骤。 3. 威胁建模 - 描述：本模块专注于威胁建模的艺术。威胁建模是安全专业人员以及计算机领域其他职业的重要技能，能够帮助早期识别安全问题，提高组织效率，并更好地理解组织及其资产在攻击面前的脆弱性。 4. 业务连续性规划 - 描述：在课程最后一个模块中，我们将讨论信息系统在现代商业中的关键角色，因此制定信息系统及其他业务职能的连续性计划至关重要。业务连续性计划能够使企业及其IT基础设施能够抵御任何可能的中断。无论您是朝着CISSP认证努力，还是希望从事风险管理的角色，了解业务连续性在关键业务运营持续性中的作用都非常重要。
Part: 1
Title:Risk Assessment
Description:Welcome to the first module of Introduction to Risk Management. In this module we focus on understanding what a risk is and the range of dependencies that a risk may rely on. We will also list and describe risk assessment techniques that can help you better understand any risk landscape. Finally, we will discuss how to present identified risks to your leadership for better decision making.
Part: 2
Title:Risk Management
Description:Welcome to Module 2! Now that we have practiced identifying risk, we will discuss the means to manage it. In this module you will be introduced to the three categories of controls, as well as the six steps of the Risk Management Framework (RMF).
Part: 3
Title:Threat Modeling
Description:Welcome to Module 3! This week, we discuss the art of threat modeling. Being able to threat model is an important skill for security professionals, as well as other professions within the computing realm. Threat modeling can help with early identification of security issues, make the organization more efficient, and offer a better understanding of how prone the organization and its assets are to attacks.
Part: 4
Title:Business Continuity Planning
Description:Welcome to the fourth and final module of Introduction to Risk Management! Information systems play critical role in today's business, hence it's important to have a continuity plan for information systems, as well as your other business functions. A business continuity plan enables business and its IT infrastructure to withstand any likely disruptions. Whether you're working towards a CISSP certification or a role in risk management, it is very important to understand the role business continuity plays in continuation of critical business operations.
In this course, you will learn about risk assessment techniques and how to implement a number of strategies that will ensure the protection of assets. You will learn about the relationship between assets, vulnerabilities, threats, and risks. You will also engage with a number of current case studies in the industry that illustrate the material. You will leave the course with skills relating to threat modeling and business continuity planning that have direct applications at your current job or in your future career.
