IT / Information Security Risk Management With Examples

This lecture is the part one of series for the IT / Information Security Risk Management.

The video is good for students preparing for exams and interviews.

The video covers the following topics:
- Risk Management
- Risk Assessment
- Risk Treatment
- Asset / Process Based Risk Assessment
- Qualitative, Quantitative and Semi Quantitative Risk Assessment / Management;
- And the definitions to understand these areas.

[vback]

Watching it again and it even got better!

[achajackson]

I’m an info sec risk analyst for my bank. This is great resource!!

[ihammads]

good video, Thank you! but need to learn, how to implement this as well :)

[esmatsaidy]

You put everything in order and the explanation was so comprehensive

[ramganesh]

One of the excellent and crisp explanations that I have seen so far. Thank You so much!

[AhmedAbrahan]

I will be joining as a Information Security Risk Analyst next month. This will help me prepare. Thank you.

[xEchoslaMx]

Thank you for your time and effort at creating this. Good job. Keep it up. I learned something new too.

[asankadhananjaya]

Wow…. Great explanation and well organized. 👏👏👏

[adilaziz]

Excellent content for beginners. Thank you for your effort

[mamtakrishna]

Quite helpful and interesting, thank you

[javedakhter]

Very easy understanding. Thanks for such working.

[mayankraj]

Very good content. Thanks for sharing this

[ahmedaliareeb]

It was informative, Ali! Thanks for the video

[MatiniSanni]

Great information Ali. I like how you structure and explained the concepts. Keep up the good work!

[tejaswiniaradhya]

Are we not considering the process value/asset value for risk score calculation?

[nihalshah]

Hi Ali
Would be very helpful if you can provide a link to the actual slide deck itself.
Great video! Thanks for the explanation!

[salaheddinebelmadani]

Hello Ali, Thank you for this helpful video . can you make video about Assent / process Inventory exercise ?

[calvinworst]

Here are the learning outcomes for anyone who needs them (they're all listed at 27:59)
What is Risk?
Why do we need risk management
What is risk management?
What is risk assessment?
What is risk treatment?
What is likelihood, impact, inherent and residual risk?
Difference between threat, vulnerability and risk.
Difference between asset owner and asset custodian.
Difference between risk management and risk assessment.
Difference between quantitative, qualitative, and semi-quantitative risk management.
The Risk Management Process.

[tausefkhan]

Thank you for the informative information. Do you have a default template to use?

[balaraju]

Thanks for the session, I guess in 18:01, it should be NIST SP 800-30 in place of NIST SP 800-50 .