Risk Assessment Training:

1/2 course given by Dayle Alsbury, Sean Lowder and Slava Sotnikov.

Date:  June 25th

Time: 8:30 AM - 12:30 PM

TOPIC: IT Security Risk Assessment Training

Summary:

IT Security Risk Assessment Training: This half-day training session is

presented in three study sections. Section One introduces the audience to

various methodologies, tools and techniques helpful to successfully conduct

IT security risk assessments. We begin with an overview of adequately

scoping and establishing the rules of engagement of your security risk

assessments. The discussion continues with an examination of the advantages

and disadvantages of qualitative and quantitative risk assessments, and some

great free methodologies and free/low cost tools.

In Section Two we examine various features of popular risk assessment

methodologies such as NIST, Octave, etc. We conclude Section Two with

developing a proposed methodology for conducting a successful risk

assessment.

Finally, in Section Three we review document and evidence collection and

analysis techniques which produce repeatable results and help support risk

assessment conclusions. We continue to expand upon risk assessment

techniques with an examination of threat, vulnerability and safeguard

identification needs and techniques. And, we finish our discussion with a

survey of business impact analysis needs and techniques which will help you

conduct a successful IT Security Risk Assessment.