Cybersecurity Risk Management

Cyber losses, reflected in daily headlines on data breaches, state-sponsored attacks on critical infrastructure, and ransomware incidents, have grown to exceed other major categories of operating risk in terms of total cost, driving increased regulatory activity in response. This means risk management professionals need a solid understanding of cyber-risk management programs, techniques, mitigation strategies, architectures, frameworks, and procedures, which this course provides. Some frameworks covered include ISO27001, NIST CSF, CIS 18 Critical Security Controls, etc. Effective management of cyber-risks is an Enterprise-wide activity addressing immediate risks requiring attention while building a mature foundation for a resilient and proactive cybersecurity risk management program; a Technology Risk Management foundation is therefore a prerequisite for enrollment; however, IT expertise is not. The course provides practical, hands-on, cases and exercises for the application of cyber-risk management principles, equipping course graduates to help lower the probability of a risk event in their organization, and to enhance organizational resilience for effective incident response and recovery.