|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/an-introduction-to-risk-management-fundamentals/
课程评论：没有评论
**Coursera课程“掌握风险管理概念”内容摘要** 本课程是一门关于信息安全风险管理的综合性培训，旨在帮助学员深刻理解风险管理的关键概念，并掌握识别、评估和缓解组织信息资产潜在安全威胁的有效策略。 **课程主要内容涵盖：** * **导论与基础 (第1、2章)：** 介绍风险管理的重要性、组成部分，以及核心术语，包括资产、威胁、脆弱性、影响与可能性、风险治理与风险管理、风险容忍度等。 * **风险管理框架 (第3、5章)：** 探讨高级别的风险管理概念，解析风险管理框架的定义，并深入介绍ISO/IEC 31000、ISO 27005、NIST SP 800-37、NIST SP 800-39等主流框架，以及联邦信息系统风险管理框架（NIST SP 800-37）的细节。此外，课程还将深入探讨风险范围界定、风险管理团队的职责以及现有风险的识别。 * **风险管理流程 (第4章)：** 提供风险管理过程的宏观概述，分为四个关键阶段：建立 context（背景）、风险评估、风险响应和风险监控。 * **风险评估 (第6章)：** 深入讲解风险评估，包括威胁建模（Threat Modelling）及其技术，以及不同的风险评估方法论，并阐述风险评估的成果。 * **风险缓解 (第7章)：** 详细介绍风险缓解（Risk Mitigation）的策略，包括风险降低、风险转移、风险规避和风险接受。 * **风险监控 (第8章)：** 解释风险监控的目的以及在风险监控阶段应采取的具体措施。 * **最佳实践与测验 (第9章)：** 提供风险管理的最佳实践，并通过测验巩固学习成果。 **目标受众：** 本课程特别适合信息安全、IT及相关领域的专业人士，以及希望提升组织安全防御能力、深入了解信息安全风险管理知识的个人。通过本课程的学习，学员将能够全面掌握信息安全风险管理理论，并将其有效应用于实际工作中，为组织的信息资产提供更具韧性的保护。
This comprehensive training program delves deep into information security risk management, offering an extensive exploration of vital concepts and proven strategies for recognizing, evaluating, and alleviating potential security threats to an organization's valuable information assets. Our curriculum encompasses critical areas such as threat assessment, vulnerability analysis, risk assessment, and risk mitigation.Discover the diverse array of threats confronting organizations, ranging from external challenges like cyber attacks and natural disasters to internal risks such as employee negligence or sabotage. Uncover techniques for identifying vulnerabilities in software, hardware, and organizational processes, equipping you with the skills needed to fortify your organization's defenses.Master the art of conducting meticulous risk assessments, evaluating the potential impact of identified threats and vulnerabilities on an organization's information assets. This involves gauging the likelihood of exploitation and understanding the potential repercussions on the organization if such events were to unfold.Our program extends its coverage to prominent risk management frameworks, including NIST SP 800-30, ISO 27005, COBIT, and NIST Cybersecurity Framework. These frameworks offer invaluable guidance on industry best practices for recognizing, evaluating, and mitigating information security risks. Upon completion of this course, you will possess a comprehensive understanding of information security risk management and the ability to apply these principles effectively in real-world scenarios.Ideal for professionals engaged in information security, IT, or related fields, as well as individuals keen on gaining insights into safeguarding organizations from potential security threats. Elevate your expertise and contribute to the resilient defense of information assets with our empowering information security risk management course.This course is organized in 9 sections: Section 1 gives an Introduction to the concept of Risk Management and you will learn below concepts:Why to Manage RiskWhy Risk ManagementComponents of Risk managementSection 2 describes the Risk Management Terminologies, and and you will learn below concepts:Importance of Risk Management TerminologiesWhat are Assets ?What are Threats ?What is Vulnerability ?What is Impact and LikelihoodRisk Governance Vs Risk ManagementWhat is Risk ToleranceSection 3 discusses Risk Management Frameworks and you will learn below concepts: Risk management on Higher levelWhat is Risk Management Framework ?ISO/IEC31000, ISO 27005, NIST SP 800-37 and NIST SP 800-39NIST (SP 800-37), Risk Management framework for Federal Information systemsSection 4 discusses Risk Management Process - 50,000 ft Overview and you will learn below concepts: Part 1 - Frame or Setting up the ContextPart 2 - Assess the RiskPart 3 - Respond to RiskPart 4 - Monitor the RiskSection 5 discusses about Risk Management Framework - part 01 Deep Dive and you will learn below concepts: Scoping of RisksRisk Management team and its effortsWhere to check if there are Existing RisksSection 6 discusses about Risk Assessment - Part 02 Deep Dive and you will learn below concepts: What is Threat ModellingThreat Modelling TechniquesRisk Assessment MethodologiesOutput: Risk Assessment ResultsSection 7 discusses about Risk Mitigation - Part 03 Deep Dive and you will learn below concepts: What is Risk Reduction or MitigationWhat is Risk TransferWhat is Risk AvoidanceWhat is Risk AcceptanceSection 8 discusses about Risk Monitoring - Part 04 Deep Dive and you will learn below concepts: Why Risk MonitoringWhat to do in Risk Monitoring phaseSection 9: Bonus SectionBest Practices in Risk ManagementQuiz
