|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/risk-management-for-cybersecurity/
课程评论：没有评论
课程名称：网络安全与信息技术管理者的风险管理 概述：您是否曾经想过，您组织的高层管理人员或您的经理为什么选择资助或不资助您的项目？在这门课程中，您将深入了解网络安全和信息技术（IT）管理者如何根据初步的风险分析决定支持哪些项目的资金。过去二十年来，我在网络安全和信息技术领域工作，为我的项目争取资金。早期在职业生涯中，我不明白为什么某些项目会获得资助并执行，而另一些却不能。我了解到，这一切都归结于高管和管理者的风险管理。 您将学习高管和管理者在讨论风险管理时所使用的术语，以及如何将风险管理的概念应用于您的网络、系统和项目。此课程并不关注如何保护您的网络，而是侧重于管理者的思维方式，并教您如何以他们的思维方式进行思考。一旦您掌握这些概念，您就能更轻松地为项目建立商业案例，并证明预算需求的合理性。 在课程的过程中，我们将讨论风险的组成部分（资产、威胁和脆弱性），并提供多个现实世界的例子。同时，我们还将涵盖定性和定量风险测量，展示如何计算由于脆弱性和威胁引起的不确定性的风险。 此课程还包括两个案例研究，探讨风险管理失败时发生的情况，具体以2017年的亚马逊网络服务停机事件和Equifax数据泄露为例。您将更好地理解这些场景、造成停机/泄露的原因，以及管理者可能做出的导致这些结果的决策。 完成本课程后，您将获得3个CEU，用于更新您的CompTIA A+、Network+、Security+、Linux+、Cloud+、PenTest+、CySA+或CASP+认证。
Have you ever wondered why your organization's executives or your manager made a decision to fund or not fund your project?In this course, you will get an inside look at how cybersecurity and information technology (IT) managers determine which projects they will support with funding, and which they won't, based on a preliminary risk analysis. Over the past two decades, I have worked in the cybersecurity and information technology realm, fighting for my projects to be funded. Early in my career, I didn't understand why certain projects would be funded and executed, while others wouldn't. What I learned, is that it all came down to Risk Management by our executives and managers.You will learn the terms used by executives and managers in discussing Risk Management, and how to apply the concepts of Risk Management to your networks, systems, and projects. This course is not an operational or tactical course that focuses on how you will secure your networks, but instead focuses on the mindset of managers and teaches you how to think like they do. Once you master these concepts, it is much easier to build your business case for your projects and justify your budgetary needs.Throughout this course, we will discuss what comprises Risk (assets, threats, and vulnerabilities), providing numerous real-world examples along the way. We will also cover Qualitative and Quantitative Risk Measurements, showing how you can calculate the risk of an uncertainty due to vulnerabilities and threats.This course also includes two case studies of what happens when risk management fails, as demonstrated by the Amazon Web Services outage and Equifax data breach that both occurred in 2017. You will learn to better understand these scenarios, what caused the outage/breach, and why managers may have made the decisions they did that led up to them.Upon completion of this course, you will earn 3 CEUs towards the renewal of your CompTIA A+, Network+, Security+, Linux+, Cloud+, PenTest+, CySA+, or CASP+ certifications.
