CS X410.B - Governance, Risk & Compliance

Course Description

Risk is a business factor that can potentially influence business operations in a positive or negative way. It is a combination of a probability of an event and its consequence. The business or mission of the organization, threats, vulnerabilities and assets are several factors we must considered when evaluating risk. Governance facilitates accountability for protection of assets in an organization. This course will describe the four risk governance objectives. The course will introduce relevant frameworks, standards, and practices to inform the application of risk assessment techniques and appropriate risk treatment. The course will describe control practices and mechanisms for proper management oversight and review. Key processes and methodologies are critical when creating and changing infrastructure components and application systems as well as to implement business resiliency tactics to minimize the impact of business disruptions.

Learner Outcomes

• Identify relevant frameworks, standards, & practices as well as applying risk identification techniques.
• Distinguish between threats & vulnerabilities & key risk management concepts.
• Identify & apply risk assessment techniques.
• Analyze risk scenarios & assess gaps between current & desired IT risk environment.
• Define the various risk response options & guidelines for risk response selection.
• Understand the difference between key risk indicators (KRIs) & key performance indicators (KPIs).
• Evaluate alignment of IT strategy with organization’s strategy & objectives.
• Evaluate proposed changes to organizational information systems meet business objectives.
• Evaluate organization’s ability to continue business operations.
• Articulate the key building blocks of cloud-based systems, cloud reference architecture, cloud computing activities & capabilities.

Applies Towards the Following Certificates

• Applied Cybersecurity : Required