In the second module, we will focus on the strategic security program and what it contains. Then we will review what are assets, and how can they be identified with a practical example. The idea is to understand how strategic security program is developed and how IT and knowledge assets are identified.

The third module concentrates on risk assessment and management strategies. First, you will learn some concepts central for risk discussion, then we will identify risks, assess them and review the well-known risk management strategies.

In the fourth module, we will go deeper into risk management, when the information security controls are introduced as well as different control types, and how their effectiveness is assessed. Also, you will learn about the audits and maintenance of security program.