Part Three: Controlling Threats and Risk

This lesson explores risk analysis and prepares you for the CISM examination, which will cover the significant aspects of risk. We'll cover different risk levels and types of risk and how they can potentially affect an organization. We also look at the risk assessment cycle and the stages required when analyzing risk. You'll also learn about the various risk analysis methods available. Then we'll move on to how risk analysis can be used when planning and deploying risk controls and countermeasures.

If you have any feedback relating to this lesson, please contact us at support@cloudacademy.com.

Learning Objectives

• Identify risk levels and potential impact of given risks upon the assets
• Learn about the risk assessment cycle
• Learn about different risk analysis methods including qualitative, semiquantitative, quantitative, OCTAVE, and FAIR
• How to use risk analysis to control threats and risk
• Define a strategy for deploying risk countermeasures

Intended Audience

This lesson is intended for those looking to take the CISM (Certified Information Security Manager) exam or anyone who wants to improve their understanding of information security.

Prerequisites

Any experience relating to information security would be advantageous, but not essential. All topics discussed are thoroughly explained and presented in a way allowing the information to be absorbed by everyone, regardless of experience within the security field.