Threat Risk Assessment:
This applied course is designed for all TRA stakeholders, including TRA practitioners (those who conduct TRAs), risk management program managers (those who review and recommend risk mitigation strategies based on TRA results), staff supporting the TRA process (auditors, legal, human resources, corporate security, IT operations, etc.) and senior risk management executives (those who fund risk management programs and assume residual risk for their organizations).
How You will Benefit:
- Conduct cost-effective TRAs that meet organizational requirements
- Review and analyze TRAs in order to recommend amendments to baseline IS security safeguards and postures
- Approve, fund and implement IS security safeguards based on informed decisions
- Manage IS security programs through application of proven security risk management methodologies
Methodology
This is a cumulative course, wherein students are introduced to InfoSec and TRA concepts and principles at the outset and then build upon them throughout the course by analyzing a case study in syndicate at each step of the TRA process, by completing “mini-quizzes” throughout the course and by discussing their real-world concerns with the facilitation staff. In this manner the course can also be considered a seminar or workshop, since students will have ample opportunity to both practice their TRA skills and engage in knowledge transfer with their colleagues and the facilitators. Using the various tools from this workshop, and the support of our IT security specialist team, participants will work through a scenario and complete an actual TRA.