Risk Management in Cybersecurity- Information Security Risk Management | Quantitative & Qualitative

preview_player
Показать описание


This video includes:
• Cybersecurity Risk Management | Information Security Risk Management
○ What is risk management?
○ Why is risk management important?
○ Risk elements and its types
§ Threat agent/actor
§ Threats
§ Vulnerabilities
§ Risk
§ Safeguards / security controls / controlmeasures
§ Assets
§ Asset Evaluation
§ Attach
§ Breach
○ Risk assessment/analysis and its types
§ Quantitative risk analysis
□ Asset Valuation (AV)
□ Exposure Factor (EF)
□ Single Loss Expectancy (SLE)
□ Annualized Rate of Occurrence (ARO)
□ Annualized Loss Expectancy (ALE)
□ Annual Cost of Safeguards (ACS)z
□ Cost/benefit analysis of safeguards
§ Qualitative risk analysis
□ Delphi technique
§ Hybrid risk analysis
○ Residual Risk
○ Total Risk
○ Risk response and its types:
§ Risk transfer/assign
§ Risk mitigation/reduction
§ Risk avoidance
§ Risk acceptance
§ Risk ignore/reject
§ Risk deterrence
○ NIST SP 800-37's Risk Management Framework (RMF) and its steps
§ Prepare
§ Categorize
§ Select
§ Implement
§ Assess
§ Authorize
§ Monitor
Рекомендации по теме
Комментарии
Автор

One of the best videos on risk management. Thanks for uploading this.

raviram
Автор

I am not sure why only 2 comments and 38 likes for this excellent content, i found this really useful for my CISSP Exam Preparation, Thank you for this content Navya Madam

Yogi-dcnw
Автор

One of the best videos on risk management. Keep up the great work

itsozzy
Автор

I will have to agree with the last comment. Key points were articulated well allowing the foundation to build on.

robertegoroff
Автор

Hello Medam /Sir i want to know [this will comes under the cyber security - or this one will comes under the saperate domain ] i thinkm first we need to learn the cyber security

prashanthlastplayer
Автор

Can I talk to you I need your help and guidance I am 14 years into information security Domin and have done audits in both sides....please respond

VishalRajput-ykkx
Автор

Cloud security is just a video course or how to block the threats is there is No showing how to block the threads

prashanthlastplayer