Information Security Risk Management

Course Description:

This course provides the overall process and techniques for identify, assess, evaluate, mitigate, communicate and monitor information security risk the organization. The delegate will understand the concepts of risk management including the standard related to risk management. This course also provide the explanation of security control to mitigate the risk. The workshop will be performed during the course.

Duration : 2 Days (9:00 - 16:30)

Fee :  12,900 Bahtexclude VAT Early Bird 12,500 Bahtexclude VAT

( Fee includes Course Material + Coffee Break and Lunch )

Instructor:   A.Wanpen Puangrat

IRCA ISO 27001 LEAD AUDITOR, IRCA ISO 20000 AUDITOR, ITIL v3,

Training Schedule:

• 28 - 29 January 2016

• 26 - 27 May 2016

• 15 - 16 September 2016

Training Venue:  Conference Center, 4th Floor,Q-House Lumpini, 1 South Sathorn Rd(near MRT  Lumpini Station Exit 2)   >> See Map

Prerequisite:     Basic concept of Information Security

Who Should Attend:

● IT Director/IT Manager

● Information security Core Team or anyone with responsibility for, or with an interest in.

 Course Outline:

• Introduction to Risk Management

• Standard related to Risk Management

• Overview of the Information security risk management process

• Information security risk identification

• Information security risk assessment

• Information security risk evaluation

• Information security risk treatment and controls for mitigation risks.

• Information security risk communication

• Information security monitoring and review

• Information security risk management workshop

Course Objectives:

At the end of this course, delegates will be able to:

• Understand overview concept of Risk Management.

• Understand the overall of information risk management process including the basic knowledge of risk aspects e.g. Asset valuation, threat, vulnerability and controls for mitigation risks.

• Identify the standard or best practice of Risk Management.

• Understand how to identify, assess, evaluate, mitigate and monitor information security risks.

• Understand technique for communicating, controlling the information security risks.