Module 4 - ISACA CRISC Chapter 3 - IT Risk Response and Mitigation

This doctoral-level course covers many cyber risk management aspects based on the ISACA and US Government NIST RMF and ATO methodology. In general, there are too many threats and potential vulnerabilities but not enough money and resources to protect the assets within organizations, particularly those connected to the Internet.

The course provides the foundations for the thoughtful and purposeful development of cyber defense strategies in an organization. The course covers the strategic decision-making process, formal methodologies of identifying which assets to defend and why, and finally concludes with a hands-on cybersecurity risk management deployment based on the NIST RMF and ATO Process used within the US Government Federal Agencies.