Duration
Risk Management Approach and Practices
3 days
Outline
1: Introduction to Risk Management
- Introduction to Risk Management
- Cyber-Risk Sources
- Black Swan Events
- Compliance Risk
- Ethics
- A Seven-Question Framework for Ethical Decision-Making
- Fraud Risk Management
- Risk Appetite Statement
- Risk Tolerance
- Risk Threshold
- Risk Retention
- Risk Management Standards
2: The Essentials of a Risk Management Program
- Where Risk Resides
- Risk Ownership
- Key Risk Indicators (KRI)
- Risk Assessment Types
- ISO 27001-based Risk Assessment Process
- Risk Categories
- Risk Rewards
- Silent Cyber Risk
- Risk Registry
- Risk Taxonomy
- Risk Rewards
- Risk Ontology
- Risk Registry Products
- Applying Compensating Controls to Reduce Risk
- Risk Calculation Formula
- Risk Management Software
- Risk Maps
- Risk-Mapping Software
3: Risk Management Frameworks
- ISO 27005
- NIST Risk Management Framework (RMF)
- NIST Risk Management and Assessment
- NIST Risk Management Hierarchy
- NIST Risk Assessment Process
- Other Frameworks and Methodologies
- Lesser Known Risk Assessment Methods
4: Risk Management Policies and Procedures
- Risk Management Lifecycle
- Risk Management Program Implementation Use Case
- Risk Management Program Review
- Risk Program Maturity Models
- Enterprise Risk Management (ERM)
5: Risk-Based Audits
- Risk-Based Internal Audit
- Physical Risk Assessments
6: Third-Party Risk Management (TPRM)
- TPRM Program Structure
- Delivery Assurance
- Validation of Meeting Contractual Requirements
- Formal Delivery Audits
- Periodic Random Delivery Audits
- Third-Party Attestation Services (TPRM)
7: Risk Management Positions
- Risk Management Positions
8: Risk Law
- Risk Law
9: Procurement Risk Management
- Procurement Risk Management
10: Risk Culture
- Risk Culture
11: Future of Risk Management
- Future of Risk Management
Programme scope, delivery arrangements and suitability are confirmed during enquiry.