LDR419: Performing A Cybersecurity Risk Assessment

WHAT IS A CYBERSECURITY RISK ASSESSMENT?

A cybersecurity risk assessment is a tool organizations can use to help ensure that appropriate security safeguards are in place that allow technology systems to continue to meet the organization's goals, needs, and regulations.

Every organization should be performing risk assessments as a part of their cybersecurity program. Regular risk assessments allow organizations to create practical strategies for defense and evaluate where there are weaknesses in their cybersecurity program that could keep them from achieving their goals. Most cybersecurity risk courses are theoretical and academic, often leaving students unsure how to do the actual assessment work. This cyber security risk assessment training teaches students the practical, hands-on skills they need to perform risk assessments.

The course uses the Cyber42 leadership simulation game to put students into real-world scenarios that spur discussion and critical thinking of situations that they will encounter at work. Throughout the class students will participate in multiple Cyber42 activities to help them practice what they learn and ensure that they will be able to take these skills immediately back to the office.

BUSINESS TAKEAWAYS

• Plan for and establish the context for a cybersecurity risk assessment
• Meet and exceed regulatory requirements
• Effectively export the results of a risk assessment to key stakeholders
• Create a strategy for how to respond to identified cybersecurity risks

SKILLS LEARNED

• Constructing a risk management program
• Creating a cybersecurity program charter
• Choosing appropriate cybersecurity safeguards
• Performing third-party risk assessments
• Performing a cyber security risk assessment
• Evaluating cybersecurity documentation
• Examining the implementation of cybersecurity safeguards
• Thoroughly reporting risk to business stakeholders
• Effectively reporting risk to technical stakeholders
• Productively respond to risks identified during an assessment

HANDS-ON CYBERSECURITY RISK ASSESSMENT TRAINING

Each of the case studies in this course will be based on a fictitious technology company, Initech Systems, and its quest towards maintaining a more mature cybersecurity program. Students will have an opportunity to explore Initech's specific cybersecurity strategies and tactical plans, which are based on real-world examples. To facilitate these case studies, students will use the Cyber42 tabletop simulation game to put students in real-world scenarios that spur discussion and critical thinking of situations that they will encounter at their offices.

• Evaluating an Organization's Governance Model
• Evaluating a Cybersecurity Program's Goals to Create a Safeguard Inventory
• Creating a Comprehensive Risk Assessment Plan for Internal and Third Parties
• Evaluating a Cybersecurity Policy
• Evaluating Cybersecurity Technical Safeguards
• Creating an Executive Risk Briefing
• Writing a Personal Action Plan

Section 1: Learn the practical, foundational skills necessary to prepare for and plan for performing a risk assessment.

Section 2: Learning the practical skills for how to perform a cybersecurity risk assessment and present risks to leadership.

WHAT YOU WILL RECEIVE

• Printed and electronic courseware
• Cybersecurity risk assessment templates, tools, and checklists
• Access to the Cyber42 security leadership simulation web app
• MP3 audio files of the complete course lecture
• Exercise workbook and electronic workbook with detailed step-by-step instructions for case studies covered in class

WHAT COMES NEXT

• SEC566: Implementing and Auditing CIS Controls
• MGT512: Security Leadership Essentials for Managers