Awaiting product image

Risk Management ISO 31000 and ISO/IEC 27005 (Implementer level) Course

590,00 € iva esclusa

A 16-hour course based on the ISO 31000 and ISO/IEC 27005 standards, delivered live, online or in person, with exercises on operational templates. It provides the tools to implement a risk management process that conforms to ISO 31000, including assessment techniques and their application to information security risks.

Description

The Risk Management ISO 31000 and ISO/IEC 27005 course (Implementer level) provides the knowledge needed to implement a risk management process that conforms to ISO 31000, including risk assessment techniques and their application to information security risks under ISO/IEC 27005.

Taught by Dott.ssa Valentina Grazia Sapuppo, the course is delivered live, online or in person, and combines methodology with exercises on operational templates (registers, checklists, procedures) that can serve as a basis for your own risk management process.

16
Hours
8
Modules
2
Lessons
Live
Synchronous
Course information
Instructor
Dott.ssa Valentina Grazia Sapuppo
Level
Implementer
Training area
Management systems
Delivery
Synchronous, online or in person
Schedule
Shared upon enrolment
Participants
Classes of 6 to 16 participants
Who it is for
  • Risk managers
  • Security managers
  • Consultants
  • Risk committee members
Objectives and expected outcomes

The course provides the knowledge needed to implement a risk management process that conforms to ISO 31000, including assessment techniques and their application to information security risks under ISO/IEC 27005.

By the end of the course, participants will:

  • be able to set up the risk management framework, governance, context and risk criteria;
  • be able to identify, analyse and evaluate risks using the risk assessment techniques of IEC 31010;
  • be able to carry out an information security risk assessment under ISO/IEC 27005;
  • be able to define risk treatment and action plans, and set up monitoring, review and reporting;
  • work on operational templates (registers, checklists, procedures) they can use as a basis for their own process.

Main topics

ā—Risk framework and governance ā—Context and risk criteria
ā—Risk identification, analysis and evaluation ā—Risk assessment techniques (IEC 31010)
ā—Information security risks (ISO/IEC 27005) ā—Treatment, monitoring and reporting

Course programme

01 Risk management framework and governance
02 Establishing the context and risk criteria
03 Risk identification
04 Risk analysis and evaluation
05 Risk assessment techniques (IEC 31010)
06 Information security risk assessment (ISO/IEC 27005)
07 Risk treatment and action plans
08 Risk monitoring, review and reporting

The programme is complemented by hands-on exercises on operational templates and a final learning assessment.

Prerequisites

Knowledge of risk management principles at Foundation level. No previous experience, preparatory courses or specific digital skills are required.

Methodology and materials

Exercises
Practical activities on operational templates to apply the content straight away.
Live lessons
Two synchronous sessions with the instructor, online or in person, totalling 16 hours.
Downloadable materials
Slides and cards, operational templates (registers, checklists, procedures).
Assessment
Final learning assessment.

Certificate of attendance

A certificate of attendance is issued at the end of the course.