Information Technology

Certified Data Centre Risk Professional (CDRP®)

Instructor-Led 15 Agenda

Course Objective

After completion of the course, the participant will be able to: 1. Understand the different standards and methodologies for risk management and assessment 2. Establish the required project team for risk management 3. Perform the risk assessment, identifying current threats, vulnerabilities and the potential impact based on customised threat catalogues 4. Report on the current risk level of the data centre both quantitative and qualitative 5. Anticipate and minimise potential financial impacts 6. Understand the options for handling risk 7. Continuously monitor and review the status of risk present in the data centre 8. Reduce the frequency and magnitude of incidents 9. Detect and respond to events when they occur 10. Meet regulatory and compliance requirements 11. Support certification processes such as ISO/IEC 27001 12. Support overall corporate and IT governance

Who Should Attend

There is no specific prerequisite for the CDRP® course. However, participants who have at least three years' experience in a data centre and/or IT infrastructures will be best suited.

Introduction to Risk Management Lesson Id 1

Introduction to Risk Management

Data Centre Risk and Impact Lesson Id 2

Data Centre Risk and Impact

Standards, Guidelines and Methodologies Lesson Id 3

Standards, Guidelines and Methodologies

Risk Management Definitions Lesson Id 4

Risk Management Definitions

Risk Assessment Software Lesson Id 5

Risk Assessment Software

Risk Management Process Lesson Id 6

Risk Management Process

Project Approach Lesson Id 7

Project Approach

Context Establishment Lesson Id 8

Context Establishment

Risk Assessment - Identification Lesson Id 9

Risk Assessment - Identification

Risk Assessment - Analysis and Evaluation Lesson Id 10

Risk Assessment - Analysis and Evaluation

Risk Treatment Lesson Id 11

Risk Treatment

Communication Lesson Id 12

Communication

Risk Monitoring and Review Lesson Id 13

Risk Monitoring and Review

Risk scenarios Lesson Id 14

Risk scenarios

Exam: Certified Data Centre Risk Professional Lesson Id 15

Exam: Certified Data Centre Risk Professional

Lesson Id	Title	Description
1	Introduction to Risk Management	Risk management concepts<br />Senior management and risk<br />Enterprise Risk Management (ERM)<br />Benefits of risk management
2	Data Centre Risk and Impact	Risk in facility, power, cooling, fire suppression, infrastructure and IT services<br />Impact of data centre downtime<br />Main causes of downtime<br />Cost factors in downtime
3	Standards, Guidelines and Methodologies	ISO/IEC 27001:2013, ISO/IEC 27005:2011, ISO/IEC 27002:2013<br />NIST SP 800-30<br />ISO/IEC 31000:2009<br />SS507:2008<br />ANSI/TIA-942<br />Other methodologies (CRAMM, EBIOS, OCTAVE, etc.)
4	Risk Management Definitions	Asset<br />Availability/Confidentiality/Integrity<br />Control<br />Information processing facility<br />Information security<br />Policy<br />Risk<br />Risk analysis/Risk assessment/Risk evaluation/<br />Risk treatment<br />Threat/Vulnerability<br />Types of risk
5	Risk Assessment Software	The need for software<br />Automation<br />Considerations
6	Risk Management Process	The risk management process<br />Establishing the context<br />Identification<br />Analysis<br />Evaluation<br />Treatment<br />Communication and consultation<br />Monitoring and review
7	Project Approach	Project management principles<br />Project management methods<br />Scope<br />Time<br />Cost<br />Cost estimate methods
8	Context Establishment	General considerations<br />Risk evaluation, impact and acceptance criteria<br />Severity rating of impact<br />Occurrence rating of probability<br />Scope and boundaries<br />Scope constraints<br />Roles & responsibilities<br />Training, awareness and competence
9	Risk Assessment - Identification	The risk assessment process<br />Identification of assets<br />Identification of threats<br />Identification of existing controls<br />Identification of vulnerabilities<br />Identification of consequences<br />Hands-on exercise: Identification of assets, threats, existing controls, vulnerabilities and consequences
10	Risk Assessment - Analysis and Evaluation	Risk estimation<br />Risk estimation methodologies<br />Assessment of consequences<br />Assessment of incident likelihood<br />Level of risk estimation<br />Risk evaluation<br />Hands-on exercise: Assessment of consequences,<br />probability and estimating level of risk
11	Risk Treatment	The risk treatment process steps<br />Risk Treatment Plan (RTP)<br />Risk modification<br />Risk retention<br />Risk avoidance<br />Risk sharing<br />Constraints in risk modification<br />Control categories<br />Control examples<br />Cost-benefit analysis<br />Control implementation<br />Residual risk
12	Communication	Effective communication of risk management activities<br />Benefits and concerns of communication
13	Risk Monitoring and Review	Ongoing monitoring and review<br />Criteria for review
14	Risk scenarios	Risk assessment approach<br />Data centre site selection<br />Data centre facility<br />Cloud computing<br />UPS scenarios<br />Force majeure<br />Organisational shortcomings<br />Human failure<br />Technical failure<br />Deliberate acts
15	Exam: Certified Data Centre Risk Professional	Actual course outline may vary depending on offering center. Contact your sales representative for more information.