|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/nist-rmf-risk-management-framework-and-isaca-crisc/
课程评论：没有评论
课程名称：NIST RMF（风险管理框架）与ISACA CRISC 课程概述：本课程深入探讨了两种不同的风险管理框架（RMF和CRISC），详细介绍了这两种框架的组成部分、领域以及各领域中的具体任务。课程对这两种风险框架的重点领域进行了比较与对比，强调了其关键要点和实施方法。在课程的最后，我们还会检视其他风险管理框架，并讨论CRISC作为一种认证框架的使用情况，而不是实际的风险框架。 课程内容涵盖NIST RMF（风险管理框架），该框架用于管理和缓解信息系统的风险，包括六个步骤：分类、选择、实施、评估、授权和持续监控。课程还讲解了如何在组织中实施NIST RMF，包括如何选择合适的安全控制措施以及如何评估这些控制措施的有效性。 此外，课程还介绍了ISACA CRISC认证，旨在展示在识别、评估、评估和管理信息系统风险方面的专业知识。主要涵盖CRISC的各个领域，包括IT风险识别、评估、响应和监控。课程也提供了关于如何为CRISC考试做准备的建议，包括学习技巧和最佳实践。 总的来说，此课程为信息安全领域的专业人士提供了全面的风险管理知识，特别是在NIST RMF和ISACA CRISC的背景下。该课程非常适合希望提升在管理和缓解信息系统风险方面知识和技能的信息安全人员。
This course goes through two different Risk Management Frameworks (RMF and CRISC) and details both framework components, areas, and especially the tasks involved in each area. This course examines the two risk frameworks' areas, key takeaways, and implementation. In summary, we compared and contrasted each framework and its use.We conclude the training by looking at other risk management frameworks and reviewing if the CRISC is used since this is one of the certification frameworks rather than an actual risk framework. The NIST RMF (Risk Management Framework) and ISACA CRISC (Certified in Risk and Information Systems Control) course is designed to provide a comprehensive understanding of risk management in information security.The course covers the NIST RMF, a process for managing and mitigating risks to information systems. It includes an overview of the six steps in the NIST RMF process, including categorization, selection, implementation, assessment, authorization, and continuous monitoring. Additionally, the course covers how to implement the NIST RMF in an organization, including how to select appropriate security controls and how to assess the effectiveness of those controls.The course also covers the ISACA CRISC certification, designed to demonstrate expertise in identifying, assessing, evaluating, and managing information system risks. It includes an overview of the CRISC domains, including IT risk identification, assessment, response, and monitoring. Additionally, the course covers how to prepare for and pass the CRISC exam, including study tips and best practices.Overall, this course provides a comprehensive understanding of risk management in the context of information security, including both the NIST RMF and ISACA CRISC. It is ideal for information security professionals who want to enhance their knowledge and skills in managing and mitigating risks to information systems.
