CRISC 2023: Risk Management

Proper IT governance consists of proper risk management. Risk management specialists can apply a variety of techniques to manage risk to an acceptable level.

In this course you will begin by exploring how risk management can minimize the impact of IT security events and discussing the relevance of recurring risk assessments and the use of a risk register. You will then consider risk treatments such as risk avoidance and risk transfer. Next you will learn how to calculate the annual loss expectancy (ALE) and how this compares to the cost of security controls. You will explore security control types such as preventative and compensating controls. Finally you will look at how configuration management relates to IT security how to establish security baselines and replicate cloud storage and how to back up data to the cloud.

This course can be used to prepare for the ISACA Certified in Risk and Information Systems Control (CRISC) certification.