|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/assessing-information-security-risk/
课程评论：没有评论
**课程名称：** 信息安全风险评估 **课程概述：** 本课程深入探讨信息安全风险管理流程中的风险评估环节。课程将提供一种实用的方法，指导组织如何进行信息安全风险评估，具体包括： * **准备阶段：** 如何为风险评估做好准备。 * **实施阶段：** 如何实际开展风险评估。 * **沟通阶段：** 如何将风险评估结果传达给关键组织人员。 * **维护阶段：** 如何随着时间的推移持续维护风险评估。 课程强调，风险评估并非一次性活动，而是组织在整个系统开发生命周期以及风险管理体系的各个层级上持续进行的活动，目的是为组织提供可靠的信息，以指导和支持应对信息安全风险的决策和行动。 **课程结构：** * **第一部分：基础** * 关键风险概念导论 * 什么是信息安全风险评估？ * 为何进行风险评估？风险评估在保障组织（业务、人员、流程、技术和数据）安全方面扮演的角色 * 风险评估如何支持各类基于风险的决策和活动 * **第二部分：进行风险评估** * 案例场景介绍及其要求 * 案例分析方法 * **准备阶段** * **进行风险评估阶段** * **沟通和共享风险评估信息阶段** * **维护风险评估阶段** * **产出最终报告：** FinSecure公司的风险评估报告 本课程还将引导学员深入了解后续章节中的其他资源。
In this course we take a deep dive into the risk assessment element or component of the risk management process as it relates to information security.This course focuses on a practical approach to the risk assessment component of risk management-providing a step-by-step process for organizations on: (i) how to prepare for risk assessments; (ii) how to conduct the risk assessments; (iii) how to communicate risk assessment results to key organizational personnel; and (iv) how to maintain the risk assessments over time. Risk assessments are not simply one-time activities that provide permanent and definitive information for decision makers to guide and inform responses to information security risks. Rather, organizations employ risk assessments on an ongoing basis throughout the system development life cycle and across all of the tiers in the risk management hierarchy and that is what we intend to achieve by doing this course.This course is broken down as follows:SECTION-1: FOUNDATION Intro to KEY RISK CONCEPTS1- What does it mean to assess information security risks?2a- Why is it necessary and what roles does this process plays in keeping an organization's, businesses, people, processes, technology and data secure?2b-Risk assessments can support a wide variety of risk-based decisions and activitiesSECTION-2: CONDUCTING THE RISK ASSESSMENT Intro to the case scenario and its requirementsThe approach to addressing the case1-PREPARATION PHASE2-CONDUCTING THE RISK ASSESSMENT PHASE3-COMMUNICATING AND SHARING RISK ASSESSMENT INFORMATION PHASE4-MAINTAINING THE RISK ASSESSMENT PHASE5-PRODUCTING THE FINAL REPORT: Risk Assessment Report for FinSecure, Inc.Delve into this course to see the other wonderful resources presented in the following sections.SECTION-3:SECTION-4:SECTION-5:
