CISM: Domain 2 - Module 2

This lesson within the CISM Domains course looks at risk management and the resources that can be used in order to avoid and tackle risk in an organization. We'll start by looking at risk identification and risk analysis, which is the quantification and comparison of risks. Then we look at a variety of risk management frameworks in use by companies today.

Then we look at the constraints that can hamper your efforts to manage risk, focusing on working with third parties and the technical and human aspects to take into consideration when doing so.

Learning Objectives

• Understand how an organization can identify and analyze risk
• Learn the constraints to risk management

Intended Audience

This lesson is intended for anyone preparing for the Certified Information Security Management exam or anyone who is simply interested in improving their knowledge of information security governance.

Prerequisites

Before taking this lesson, we recommend taking the CISM Foundations course first.