INTRODUCTION TO RISK ASSESSMENT METHODOLOGIES LEARNING THE DIFFERENT METHODOLOGIES IN RISK MANAGEMENT
SUMMARY This one day course allows participants to learn about the different methods of risk estimation, most used on the market, as CRAMM, EBIOS, MEHARI, OCTAVE and Microsoft Security Risk Management Guide. The methods discussed are compatible with the principles of ISO 27005 and within the framework of an implementation process of ISO 27001. Participants will see different stages of conducting a risk assessment based on each of the methodologies presented.
COURSE AGENDA • • • • • • •
Concepts and definitions related to risk management according to ISO 27005 Standards, frameworks and methodologies in risk management Introduction to CRAMM Introduction to EBIOS Introduction to MEHARI Introduction to OCTAVE Introduction to Microsoft Security Risk Management
EXAM AND CERTIFICATION Not applicable
GENERAL INFORMATION • A student manual containing over 100 pages of information and practical examples are given to participants • A participation certificate of 7 CPD (Continuing Professional Development) credits is awarded to participants
DURATION: 1 DAY PREREQUISITES None WHO SHOULD ATTEND? • IT professionals wishing to obtain a comprehensive understanding of risk management within an organization • Staff implementing or seeking to comply with ISO 27001 or involved in a risk management program • Member of the information security team LEARNING OBJECTIVES • To understand the concepts, approaches, methods and techniques allowing an effective management of risk according to ISO 27005 • To interpret the requirements of ISO 27001 on information security risk management • To understand the relationship between the information security risk management, the security controls and the compliance with the requirements of different stakeholders of an organization • To become familiar with the most used risk management methods on the market as CRAMM, EBIOS, MEHARI, OCTAVE and Microsoft Security Risk Management Guide This is a PECB official training course
36