Course Outline
1. Pengantar manajemen risiko
2. Metodologi penilaian risiko
3. Kerangka kerja dan model proses manajemen risiko keamanan informasi ISO 27005
4. Klasifikasi dan identifikasi aset informasi
5. Definisi ancaman terhadap aset informasi
6. Identifikasi kerentanan yang mungkin dieksploitasi oleh ancaman ini
7. Analisis risiko: penilaian risiko menggunakan skala dan perhitungan sederhana
8. Pengenalan alat analisis risiko
9. Strategi evaluasi dan penerimaan risiko
10. Penanganan risiko dan pemilihan langkah-langkah pengendalian mitigasi
11. Tinjauan dan perbaikan berkelanjutan atas penilaian dan manajemen risiko
12. Komunikasi dan konsultasi risiko
13. Mengintegrasikan kerangka manajemen risiko keamanan informasi ISO 27005 ke dalam ISMS ISO 27001
Testimonials (5)
Pengaturan laporan dan aturan.
Jack - CFNOC- DND
Course - Micro Focus ArcSight ESM Advanced
Machine Translated
The fact that there were practical examples with the content
Smita Hanuman - Standard Bank of SA Ltd
Course - Basel III – Certified Basel Professional
The trainer was extremely clear and concise. Very easy to understand and absorb the information.
Paul Clancy - Rowan Dartington
Course - CGEIT – Certified in the Governance of Enterprise IT
The trainer was very motivated and knowledgeable. The trainer was not only capable of information transfer, she also brought it with humor to lighten the dry theoretical training subject.
Marco van den Berg - ZiuZ Medical B.V.
Course - HIPAA Compliance for Developers
I genuinely enjoyed the real examples of the trainer.