This course addresses the third part of the risk management effort, the assessment and prioritization of risk. This will ensure that management is provided complete and accurate information required to make the appropriate risk response decision. You will learn the process of risk assessment including threat and vulnerability identification, analysis of impact and likelihood of risk, and the process of communicating risk to management. As a candidate for the CRISC examination, it is essential to have a solid understanding of risk assessment.
Author Name: Kevin Henry
Author Description:
Kevin Henry is a well-known and respected educator and lecturer in the fields of information security and audit. Kevin uses his more than 30 years of practical experience as a network technician, computer programmer, and information systems auditor to deliver outstanding presentations that make each topic interesting, relevant, and useful. Often described by students as “The best instructor I have ever had,” Kevin has the ability to provide quality instruction that engages the audience and provi… more

Table of Contents

• Course Overview
  2mins
• Key Topics and the Learning Objectives
  6mins
• Risk Identification vs. Risk Assessment
  10mins
• Impact of Culture on Risk
  12mins
• Controls and Controls Gap
  20mins
• Determining Risk
  28mins
• Risk Areas to Consider
  10mins