ENG 351 – Preparing the Risk Management Framework

Course Overview

Before any organization can adequately Implement the Risk Management Framework they must understand how to determine and apply appropriate security requirements. Preparation requires a disciplined and structured set of activities in order to execute the framework at appropriate risk management levels.

This course aims to provide Engineers, Software Architects, and Systems Analysts with context and priorities for managing security and privacy risk.

Topics Include:

• Identifying key Individuals and specification of roles and responsibilities in the risk management process
• Identifying risk tolerance and determining a particular strategy for risk management
• Conducting an organization-level risk assessment to ensure leadership is aligned
• Continuous monitoring to enable a rapid and effective response to changes in the risk landscape or changes in the effectiveness of controls