Curso IRM – Information Risk Management

Curso de Gestão de Risco da Informação

Ambiciona-se que com esta formação os delegados adquiram os conhecimentos necessários que lhes possibilite o desenho, implementação e manutenção de um programa de gestão de risco nas suas empresas, através da familiarização com as principais directrizes da Norma.

Formador:

Jose A. Mañas

a. Risk Analysis Elements
- Assets: discovery, dependencies, and valuation
- Threats: discovery and valuation
- Potential impact and risk
- Safeguards: discovery, applicability, and valuation
- Residual impact and risk

b. Risk Management
- Security [improvement] plan
- Impact and risk indicators: progress control
- Cost analysis
- RoSI (Return On Security Investment)
- Business continuity (intro to, tool usage)

Along the course, a study case is proposed, and developed in cooperation between the students and the teacher. There is no ‘right’ solution, we take the case as a driver for discussing actual concerns of the attendants, and typical questions.
• 50% devoted to "theory", explaining concepts, practical approach, and the methodology itself. The aim is to help practitioners to know how to carry out, and how to manage a risk management project.
• 50% devoted to tool usage, on a working example to discover to which extend the tool helps, and when experts are needed to take decisions

gestao de risco shadowsec irm risk management ciso