Many information systems projects deliver systems that fail to meet adequate security requirements. This poses a risk, not just to the system but often to the entire organization. In this course, Information Security Risk Management Program for CGRC, you’ll learn to understand information security principles and the skills of risk management. First, you’ll explore risk management frameworks and concepts. Next, you’ll discover information security principles and controls. Finally, you’ll learn how to address legal and regulatory compliance requirements. When you’re finished with this course, you’ll have the skills and knowledge of information security risk management needed for the Certified in Governance, Risk, and Compliance Examination.
Author Name: Kevin Henry
Author Description:
Kevin Henry is a well-known and respected educator and lecturer in the fields of information security and audit. Kevin uses his more than 30 years of practical experience as a network technician, computer programmer, and information systems auditor to deliver outstanding presentations that make each topic interesting, relevant, and useful. Often described by students as “The best instructor I have ever had,” Kevin has the ability to provide quality instruction that engages the audience and provi… more

Table of Contents

• Course Overview
  1min
• Information Security Risk Management Foundations
  42mins
• Risk-based Control Selection
  21mins
• Legal and Regulatory Requirements
  10mins
• Domain Summary
  3mins