Thursday, June 25, 2009 from 8:30 AM - 12:30 PM (CT)
Risk Assessment Training:
1/2 course given by Dayle Alsbury, Sean Lowder and Slava Sotnikov.
Date: June 25th
Time: 8:30 AM - 12:30 PM
TOPIC: IT Security Risk Assessment Training
Summary:
IT Security Risk Assessment Training: This half-day training session is presented in three study sections. Section One introduces the audience to various methodologies, tools and techniques helpful to successfully conduct IT security risk assessments. We begin with an overview of adequately scoping and establishing the rules of engagement of your security risk assessments. The discussion continues with an examination of the advantages and disadvantages of qualitative and quantitative risk assessments, and some great free methodologies and free/low cost tools. In Section Two we examine various features of popular risk assessment methodologies such as NIST, Octave, etc. We conclude Section Two with developing a proposed methodology for conducting a successful risk assessment. Finally, in Section Three we review document and evidence collection and analysis techniques which produce repeatable results and help support risk assessment conclusions. We continue to expand upon risk assessment techniques with an examination of threat, vulnerability and safeguard identification needs and techniques. And, we finish our discussion with a survey of business impact analysis needs and techniques which will help you conduct a successful IT Security Risk Assessment.
Email
Facebook
Twitter
LinkedIn
MySpace
Digg
del.icio.us
Reddit