Home
Courses
Cyber Security Risk Assessment Training

Cyber Security Risk Assessment Training

Course 2013

Duration: 4 days
Language: English
Level: Foundation

This risk assessment training course will teach you how to conduct a security risk assessment to protect your organization. You will learn about the laws and regulations that impose strict cybersecurity requirements on all organizations. You will also gain the skills to develop a compliance assessment plan and employ a standards-based risk management process while maintaining a satisfactory security posture.

Cyber Security Risk Assessment Training Delivery Methods

In-Person
Online

Cyber Security Risk Assessment & Management Training Information

In this Cyber Security Risk Assessment & Management training, you will learn how to:

Implement standards-based, proven methodologies for assessing and managing your organization's information infrastructure risks.
Select and implement security controls that ensure compliance with applicable laws, regulations, policies, and directives.
Extend security protection to ICS (Industrial Control Systems) and the cloud.

Risk Assessment Training Prerequisites

Attendees should have a basic knowledge of business processes and technology concepts. No specialized technical knowledge is assumed.

Cyber Security Risk Assessment Training Course Outline

Module 1: Introduction to Risk Assessment and Management

Ensuring compliance with applicable regulatory drivers
Protecting the organization from unacceptable losses
Describing the RMF (Risk Management Framework)
Applying NIST/ISO risk management processes

Module 2: Characterizing System Security Requirements

Defining the system

Outlining the system security boundary
Pinpointing system interconnections
Incorporating the unique characteristics of Industrial Control Systems and cloud-based systems

Identifying security risk components

Estimating the impact of compromises on confidentiality, integrity, and availability
Adopting the appropriate model for categorizing system risk

Setting the stage for successful risk management

Documenting critical risk assessment and management decisions in the SSP (System Security Plan)
Appointing qualified individuals to risk governance roles

Module 3: Selecting Appropriate Security Controls

Assigning a security control baseline

Investigating security control families
Determining the baseline from system security risk

Tailoring the baseline to fit the system

Examining the structure of security controls, enhancements, and parameters
Binding control overlays to the selected baseline
Gauging the need for enhanced assurance
Distinguishing system-specific, compensating, and non-applicable controls

Module 4: Reducing Risk Through Effective Control Implementation

Specifying the implementation approach

Maximizing security effectiveness by "building in" security
Reducing residual risk in legacy systems via "bolt-on" security elements

Applying NIST/ISO controls

Enhancing system robustness through the selection of evaluated and validated components
Coordinating implementation approaches to administrative, operational, and technical controls
Providing evidence of compliance through supporting artifacts

Module 5: Assessing Compliance Scope and Depth

Developing an assessment plan

Prioritizing depth of control assessment
Optimizing validation through sequencing and consolidation
Verifying compliance through tests, interviews, and examinations

Formulating an authorization recommendation

Evaluating overall system security risk
Mitigating residual risks
Publishing the POA&M (Plan of Action and Milestones), the risk assessment, and recommendation

Module 6: Authorizing System Operation

Aligning authority and responsibility

Quantifying organizational risk tolerance
Elevating authorization decisions in high-risk scenarios

Forming a risk-based decision

Appraising system operational impact
Weighing residual risk against operational utility
Issuing ATO (Authority to Operate)

Module 7: Maintaining Continued Compliance

Justifying continuous reauthorization

Measuring the impact of changes on system security posture
Executing effective configuration management
Performing periodic control reassessment

Preserving an acceptable security posture

Delivering initial and routine follow-up security awareness training
Collecting ongoing security metrics
Implementing vulnerability management, incident response, and business continuity processes

Get This Course $3,285

4-day instructor-led training course
Learning Tree end-of-course exam included
One-on-one after-course instructor coaching

#2013

Guaranteed to Run - you can rest assured that the class will not be cancelled.
Oct 31 - Nov 3 9:00 AM - 4:30 PM EDT

New York or Virtual
Dec 5 - 8 11:00 AM - 6:30 PM EST

Aurora, CO or Virtual
Jan 16 - 19 9:00 AM - 4:30 PM EST

Herndon, VA or Virtual
Feb 6 - 9 9:00 AM - 4:30 PM EST

Virtual
Mar 5 - 8 9:00 AM - 4:30 PM EST

Toronto or Virtual
Mar 25 - 28 9:00 AM - 4:30 PM EDT

Virtual
Apr 23 - 26 9:00 AM - 4:30 PM EDT

New York or Virtual
May 14 - 17 9:00 AM - 4:30 PM EDT

Virtual
May 28 - 31 11:00 AM - 6:30 PM EDT

Aurora, CO or Virtual
Jun 25 - 28 9:00 AM - 4:30 PM EDT

Virtual

Scroll to view additional course dates

4-day instructor-led training course
Learning Tree end-of-course exam included
One-on-one after-course instructor coaching

#2013

Guaranteed to Run - you can rest assured that the class will not be cancelled.
Oct 31 - Nov 3 9:00 AM - 4:30 PM EDT

New York or Virtual
Dec 5 - 8 11:00 AM - 6:30 PM EST

Aurora, CO or Virtual
Jan 16 - 19 9:00 AM - 4:30 PM EST

Herndon, VA or Virtual
Feb 6 - 9 9:00 AM - 4:30 PM EST

Virtual
Mar 5 - 8 9:00 AM - 4:30 PM EST

Toronto or Virtual
Mar 25 - 28 9:00 AM - 4:30 PM EDT

Virtual
Apr 23 - 26 9:00 AM - 4:30 PM EDT

New York or Virtual
May 14 - 17 9:00 AM - 4:30 PM EDT

Virtual
May 28 - 31 11:00 AM - 6:30 PM EDT

Aurora, CO or Virtual
Jun 25 - 28 9:00 AM - 4:30 PM EDT

Virtual

Scroll to view additional course dates

Bring this or any training to your organization
Full-scale program development
Delivered when, where, and how you want it
Blended learning models
Tailored content
Expert team coaching

#2013

Questions about this course?

Customize Your Team Training Experience

Fill out the form below or call 888-843-8733

* Required Fields

Preferred method of contact:

Phone

Need Help Finding The Right Training Solution?

Our training advisors are here for you.

Cyber Security Risk Assessment & Management Training FAQs

Going through the process of identifying, analyzing, and evaluating risk. It helps to guarantee that the cybersecurity controls you choose are suitable for your organization's risks.

Information security risk management is a process of managing risks associated with using information technology.

Yes! We know your busy work schedule may prevent you from getting to one of our classrooms, which is why we offer convenient online training to meet your needs wherever you want. This course is available in class and live online.

Cyber Security Risk Assessment Training

Cyber Security Risk Assessment Training Delivery Methods

Cyber Security Risk Assessment & Management Training Information

Cyber Security Risk Assessment Training Course Outline

Module 1: Introduction to Risk Assessment and Management

Module 2: Characterizing System Security Requirements

Module 3: Selecting Appropriate Security Controls

Module 4: Reducing Risk Through Effective Control Implementation

Module 5: Assessing Compliance Scope and Depth

Module 6: Authorizing System Operation

Module 7: Maintaining Continued Compliance

Cyber Security Risk Assessment & Management Training FAQs

What is cybersecurity risk assessment?

What is risk management in information security?

Can I learn cybersecurity risk assessment and management online?

Related Courses