Many security organizations are faced with the challenge of addressing evolving threats (physical, technical, natural, man-made, accidental, cyber, etc…) utilizing limited resources. The days of throwing money at a problem and unlimited security budgets have ended. A structured approach to prioritize risk mitigation strategies, utilizing cost/benefit analysis is in order within the security community. The Analytical Risk Management process provides security professionals with the tools needed to identify and prioritize risks, and manage those risks. Attendees will develop the knowledge necessary to fully understand and implement risk management fundamentals in the establishment of a risk management program. During this course we will discuss the risk assessment, risk reporting, and other risk management methodologies and publications such as the NIST 800-37 Rev 1, “Guide for Applying the Risk Management Framework to Federal Information Systems” and the National Infrastructure Protection Plan, chapter 6 on Risk Management to name a few.
Attendees of the ARM course will be able to: