Risk Management for Cyber Security Managers - Introduction to the Course

This course on cyber risk management is divided into four main sections. It begins with an introduction to risk, covering definitions, types, and threats. The course then explores the phases of risk management, including identification, assessment, and security controls. It also addresses third-party risk management and vulnerability management, including ethical hacking. A bonus section covers qualitative and quantitative risk assessments. Resources such as a PDF summary and slides are provided for download.

What is the primary focus of the first section of the course?

• Phases of risk management

• Basics of risk and threats

• Third-party risk management

• Vulnerability management

Which of the following is NOT a phase of risk management discussed in the second section?

• Risk elimination

• Risk monitoring

• Risk assessment

• Risk identification

What is one of the key topics covered in the second section related to security?

• Security controls classification

• Third-party data sharing

• Types of adversaries

• Ethical hacking

In the context of third-party risk management, what is a significant concern for companies?

• Software updates

• Internal data breaches

• Data sharing with third parties

• Employee training

What additional topic is included in the bonus section of the course?

• Threat identification

• Security control implementation

• Quantitative risk assessment

• Risk avoidance