Risk is an ever-changing world as new technologies, threats, and vulnerabilities threaten to affect business goals and mission. The risk practitioner must be ever-alert and diligent to observe and communicate with management on the effectiveness and efficiency of the risk management process. In this course, Risk Management and Information Systems Control: Risk and Control Monitoring and Reporting, you will learn about how to monitor risk, evaluate IT controls, communicate risk monitoring results, and update the risk register. By the end of this course, you’ll have an understanding of risk monitoring and the way that risk monitoring supports the overall process and goals of risk management.
Author Name: Kevin Henry
Author Description:
Kevin Henry is a well-known and respected educator and lecturer in the fields of information security and audit. Kevin uses his more than 30 years of practical experience as a network technician, computer programmer, and information systems auditor to deliver outstanding presentations that make each topic interesting, relevant, and useful. Often described by students as “The best instructor I have ever had,” Kevin has the ability to provide quality instruction that engages the audience and provi… more

Table of Contents

• Course Overview
  1min
• Key Topics and the Learning Objectives
  6mins
• Metrics and Key Risk Indicators
  14mins
• Data Collection Sources
  11mins
• Vulnerability Assessments and Penetration Tests
  8mins
• Third Party Assurance and Reporting
  5mins