CourseInfo | SimpliTrain

Description

This course will teach students about information systems risk. Topics covered include risk identification, assessment, evaluation, response, and monitoring, as well as information systems control design and implementation.

Course Overview

This course will teach students about information systems risk. Topics covered include risk identification, assessment, evaluation, response, and monitoring, as well as information systems control design and implementation.

No results found.

The Big Picture: How Risk Management Relates to Risk Governance Lesson Id 1

The Big Picture: How Risk Management Relates to Risk Governance

Risk Identification, Assessment and Evaluation Lesson Id 2

Risk Identification, Assessment and Evaluation

Risk Response Lesson Id 3

Risk Response

Risk Monitoring Lesson Id 4

Risk Monitoring

Information Systems Control Design and Implementation Lesson Id 5

Information Systems Control Design and Implementation

Lesson Id	Title	Description
1	The Big Picture: How Risk Management Relates to Risk Governance	About the C)ISRM Exam<br />Exam Relevance<br />C)ISRM Review Course<br />Section Overview<br />Part 1 Learning Objectives<br />Risk Management<br />Section Topics<br />Overview of Risk Management<br />Risk<br />Risk and Opportunity Management<br />Responsibility vs. Accountability<br />Risk Management Roles and Responsibilities<br />Risk Management Frameworks, Standards and Practices<br />Relevance of Risk Management Frameworks, Standards and Practices<br />Frameworks<br />Standards<br />Practices<br />Essentials of Risk Governance<br />Relevance of Risk Governance<br />Overview of Risk Governance<br />Objectives of Risk Governance<br />Foundation of Risk Governance<br />Risk Appetite and Tolerance<br />Risk Appetite and Risk Tolerance<br />Risk Awareness and Communication<br />Key Concepts of Risk Governance<br />Risk Culture<br />Case Study & Practice Questions<br />Case Study<br />Practice Question 1<br />Practice Question 2<br />Practice Question 3<br />Practice Question 4<br />Practice Question 5<br />Definitions and Acronyms<br />Acronym Review<br />Definition Review<br />Supplemental Exercises<br />Big Picture Exercises<br />Suggested Resources for Further Study<br />End of C)ISRM Part I - The Big Picture
2	Risk Identification, Assessment and Evaluation	Risk Identification, Assessment and Evaluation<br />Section Overview<br />Exam Relevance<br />Domain 1 Learning Objectives<br />Tasks and Knowledge Statements<br />Task Statements<br />Knowledge Statements<br />Risk Identification, Assessment and Evaluation<br />The Process<br />Describing the Business Impact of IT Risk<br />IT Risk in the Risk Hierarchy<br />IT Risk Categories<br />High Level Process Phases<br />Generic Risk Scenarios<br />Risk Scenarios<br />Definition of Risk Scenario<br />Event Types<br />Purpose of Risk Scenarios<br />Risk Scenario Development<br />Risk Register<br />Risk Profile<br />Risk Scenario Development<br />Risk Scenario Components<br />Risk Scenario Development Enablers<br />Systemic, Contagious or Obscure Risk<br />Generic IT Risk Scenarios<br />Risk Factors<br />Definition of Risk Factor<br />Examples of Risk Factors<br />Risk Factors— External Environment<br />Risk Factors— Risk Management Capability<br />Risk Factors— IT Capability<br />Risk Factors— IT Related Business Capabilities<br />Risk Assessment Methods<br />Methods for Analyzing IT Risk<br />Likelihood and Impact<br />Risk Analysis Output<br />Risk Analysis Methods<br />Risk Analysis Methods— Quantitative<br />Risk Analysis Methods— Qualitative<br />Risk Analysis Methods— for HIGH impact risk types<br />Risk Analysis Methods<br />Risk Analysis Methods— Business Impact Analysis (BIA)<br />Methods for Assessing IT Risk<br />IT Risk Identification and Assessment<br />Identifying and Assessing IT Risk<br />Definitions<br />Adverse Impact of Risk Event<br />Business Impacts From IT Risk<br />Business Related IT Risk Types<br />IT Project-Related Risk<br />Risk Components— Inherent Risk<br />Risk Components— Residual Risk<br />Risk Components— Control Risk<br />Risk Components— Detection Risk<br />Business Risk and Threats Addressed By IT Resources<br />Identifying and Assessing IT Risk<br />Methods For Describing IT Risk In Business Term<br />s<br />Methods For Describing IT Risk In Business Terms<br />Case Study & Practice Questions<br />Case Study or Exercise<br />Practice Question 1<br />Practice Question 2<br />Practice Question 3<br />Practice Question 4<br />Practice Question 5<br />Definitions and Acronyms<br />Acronym Review<br />Definition Review<br />Supplemental Exercises<br />Domain 1<br />– Exercises<br />Suggested Resources for Further Study<br />End of C)ISRM Part II<br />- Domain 1
3	Risk Response	Section Overview<br />Exam Relevance<br />Domain 2 Learning Objectives<br />Tasks and Knowledge Statements<br />Task Statements<br />Knowledge Statements<br />Risk Response Process<br />Risk Response Objectives<br />The Risk Response Process<br />Risk Response Options<br />Risk Response Parameters<br />Risk Tolerance and Risk Response Options<br />Risk Response Prioritization Options<br />Risk Mitigation Control Types<br />Risk Response Prioritization Factors<br />Risk Response Tracking, Integration and Implementation<br />Risk Response Process Details<br />Process Phases<br />Phase 1<br />- Articulate Risk<br />Phase 2<br />- Manage Risk<br />Phase 3<br />- React To Risk Events<br />Risk Response and Risk Management Frameworks<br />Risk Management Frameworks<br />Case Study and Practice Questions<br />Sample Case Study or Exercise<br />Practice Question 1<br />Practice Question 2<br />Practice Question 3<br />Practice Question 4<br />Practice Question 5<br />Definitions and Acronyms<br />Acronym Review<br />Definition Review<br />Supplemental Exercises<br />Domain 2<br />– Exercises<br />Suggested Resources for Further Study<br />End of C)ISRM Part II
4	Risk Monitoring	Risk Monitoring<br />Course Agenda<br />Exam Relevance<br />Learning Objectives<br />Tasks and Knowledge Statements<br />Task Statements<br />Knowledge Statements<br />Essentials of Risk Monitoring<br />Essentials<br />Key Risk Indicators<br />Risk Indicators<br />Risk Indicator Selection Criteria<br />Risk Indicator Types and Parameters<br />Risk Indicator Considerations<br />Criteria for KRI Selection<br />Benefits of Selecting Right KRIs<br />Disadvantages of Wrong KRIs<br />Changing KRIs<br />KPIs<br />Data Extraction, Aggregation, & Analysis<br />Gathering KRI Data<br />Steps to Data Gathering<br />Gathering Requirements<br />Data Access<br />Data Preparation<br />Data Validating Considerations<br />Data Analysis<br />Reporting and Corrective Actions<br />Optimizing KRIs<br />Capability Maturity Models<br />Use of Maturity Level Assessment<br />Assessing Risk Maturity Levels<br />Risk Management Capability Maturity Levels<br />Changes to Threats, Vulnerabilities and Assets<br />Changing Threat Levels<br />Monitoring Changes in Threat Levels<br />Measuring Changes in Threat Levels<br />Responding to Changes in Threat Levels<br />Threat Level Review<br />Changes in Asset Value<br />Maintain Asset Inventory<br />Risk Reporting<br />Reporting Content<br />Effective Reports<br />Report Recommendations<br />Possible Risk Report Recipients<br />Periodic Reporting<br />Reporting Topics<br />Risk Reporting Techniques<br />Case Study & Practice Questions<br />Sample Case Study or Exercise<br />Practice Question 1<br />Practice Question 2<br />Practice Question 3<br />Practice Question 4<br />Definitions and Acronyms<br />Acronym Review<br />Definition Review<br />Domain 3 – Exercises<br />Suggested Resources for Further Study<br />End of C)ISRM Part II - Domain 3
5	Information Systems Control Design and Implementation	Information Systems Control Design and Implementation<br />Section Overview<br />Exam Relevance<br />Domain 4 Learning Objectives<br />Tasks and Knowledge Statements<br />Task Statements<br />Knowledge Statements<br />Control Design Considerations<br />C)ISRM Involvement<br />Control Definition<br />Control Categories<br />Control Types and Effects<br />Control Methods<br />Control Design Considerations<br />Control Strength<br />Control Costs and Benefits<br />Potential Loss Measures<br />Total Cost of Ownership For Controls<br />System Development Life Cycle (SDLC)<br />Role of the C)ISRM in SDLC<br />The SDLC Process<br />The Systems Development Life Cycle (SDLC)<br />‘Meets and Continues to Meet’<br />SDLC<br />SDLC Phases<br />Addressing Risk Within the SDLC<br />Business Risk versus Project Risk<br />Understanding Project Risk<br />Addressing Business Risk<br />Understanding Business and Risk Requirements<br />Understand Business Risk<br />System Development Life Cycle (SDLC) Phases<br />High Level SDLC Phases<br />1. Project Initiation (and Requirements Definition)<br />Project Initiation<br />Phase 1 – Project Initiation<br />Phase 1 Tasks<br />Task 1—Feasibility Study<br />Feasibility Study Components<br />Determining Feasibility<br />Outcomes of the Feasibility Study<br />Task 2—Define Requirement<br />Requirement Progression<br />Business Information Requirements (COBIT)<br />Requirements Success Factors<br />Task 3—Acquire Software “Options”<br />Software Selection Criteria<br />Software Acquisition<br />Software Acquisition Process<br />2. Project Design and Development<br />Leading Principles for Design and Implementation<br />C)ISRM Responsibilities<br />Key System Design Activities:<br />Steps to Perform Phase 2<br />Phase 2 - Project Design and Development<br />3. Project Testing<br />System Testing<br />Test Plans<br />Project Testing<br />Types of Tests<br />UAT Requirements<br />Certification and Accreditation<br />Project Status Reports<br />Phase 3 - Project Testing<br />Testing Techniques<br />Alpha Testing<br />Beta Testing<br />Function Validation<br />Parallel Testing<br />Pilot Testing<br />Regression Testing<br />Sociability Testing<br />White Box Testing<br />Verification and Validation<br />4. Project Implementation<br />Phase 4<br />- Project Implementation<br />Project Implementation<br />Implementation Phases<br />End User Training Plans & Techniques<br />Training Strategy<br />Data Migration/Conversion Considerations<br />Risks During Data Migration<br />Data Conversion Steps<br />Implementation Rollback<br />Data Conversion Project Key Considerations<br />Changeover Techniques<br />Post-Implementation Review<br />Performing Post-Implementation Review<br />Measurements of Critical Success Factors<br />Closing a Project<br />Project Management and Controlling<br />Project Management Practices<br />Project Management Tools and Techniques<br />Project Management Elements<br />Project Management Practices<br />PERT chart and critical path<br />PERT Attribute<br />Case Study & Practice Questions<br />Sample Case Study or Exercise<br />Practice Question 1<br />Practice Question 2<br />Practice Question 3<br />Practice Question 4<br />Practice Question 5<br />Definitions and Acronyms<br />Acronym Review<br />Definition Review<br />Domain 4<br />– Exercises<br />Suggested Resources for Further Study<br />End of C)ISRM Part II

CISRM-Certified Information Systems Risk Manager - ML

Description

Course Overview