Course Description

This course focuses on understanding the framework and methodologies of information security risk management. The participants will learn how to identify and model information security risks, and apply qualitative and quantitative risk assessment methods. This comprehensive coverage aims to articulate the business consequences of identified information security risks, making it essential for information security professionals.

What Students Will Learn

• Understanding of information security risk management framework and methodologies.
• Skills to identify and model information security risks.
• Ability to use both qualitative and quantitative risk assessment methods.
• Competence in articulating information security risks as business consequences.

Prerequisites

This course requires successful completion of CYBER501x Cybersecurity Fundamentals. Familiarity with basic cybersecurity concepts is assumed.

Course Coverage

• Principles of risk management: risk analysis, assessment and mitigation.
• The frameworks for qualitative and quantitative risk assessment.
• Utilization of data mining and machine learning in risk analytics.
• Extended case studies from the industry to understand practical applications.

Who This Course Is For

This course is designed for advanced students and professionals who are in the field of cybersecurity, particularly those who are keen on advancing their knowledge in cybersecurity risk management.

Real-World Application

Understanding and managing information security risks is crucial in protecting organizations' data and ensuring business continuity. The skills acquired from this course can be directly applied to roles such as cybersecurity analysts, risk managers, and security architects. The knowledge of risk assessment and mitigation enables professionals to design safer systems and respond to security incidents effectively.

Syllabus

• Week 1: Evolution of Information Security
• Week 2: Risk Management Process, Framework and Life Cycle
• Week 3: Quantitative versus Qualitative Risk Assessment
• Week 4: Defining Information Security Metrics
• Week 5: Analysis Techniques
• Week 6: Automating Metrics Calculations and Tools
• Weeks 7 & 8: Industry case studies