How does this course differ from other risk management courses?

This course combines theoretical knowledge with practical tools, such as risk registers and quantitative approaches (ALE & PRA), as well as frameworks like ISO 27005 and NIST.You’llalso discover how to enforce risk management in the IT lifecycle, providing practical applicability.

Will I be able to apply risk management frameworks in my role?

Absolutely! This course dives deep into frameworks like Enterprise Risk Management (ERM) and NIST Risk Assessment, helping you apply these structures toidentifyvulnerabilities, assess potential impacts, and create actionable risk management plans in your workplace.

What will I get if I subscribe to this Specialization?

When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.

Is financial aid available?

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

Information Security Risk Management

La Fête du Travail commence avec plus de 70 $ d'économies sur Coursera Plus. Bénéficiez de 40 % de réduction pendant 3 mois.

Ce cours n'est pas disponible en Français (France)

Nous sommes actuellement en train de le traduire dans plus de langues. Consultez les langues disponibles.

Information Security Risk Management

Ce cours fait partie de Spécialisation "CISM Certification Preparation"

Instructeur : LearnKartS

Inclus avec En savoir plus

Demander à Coursera

4 modules

Obtenez un aperçu d'un sujet et apprenez les principes fondamentaux.

1 semaine à compléter

à 10 heures par semaine

Planning flexible

Apprenez à votre propre rythme

4 modules

Obtenez un aperçu d'un sujet et apprenez les principes fondamentaux.

1 semaine à compléter

à 10 heures par semaine

Planning flexible

Apprenez à votre propre rythme

Ce que vous apprendrez

Gain a deep understanding of Risk Management principles,includingrisk appetite,tolerance, and capacity to drive informed decision-making.
Master risk identification techniques to assess threats, vulnerabilities, and existing controls, and create comprehensive risk registers.
Learn qualitative and quantitative risk analysis methods like ALE, FAIR, and PRA to evaluate and prioritize risks effectively.
Develop risk response strategies, define ownership, & build communication frameworks to monitor, report, & mitigate risks across the organization.

Compétences que vous acquerrez

Catégorie : Threat Management
Catégorie : Vulnerability Assessments
Catégorie : Stakeholder Engagement
Catégorie : Risk Mitigation
Catégorie : Risk Management Framework
Catégorie : Vulnerability
Catégorie : Risk Analysis
Catégorie : Vulnerability Management
Catégorie : Risk Appetite
Catégorie : Risk Control
Catégorie : Risk Modeling
Catégorie : Business Risk Management
Catégorie : Security Controls
Catégorie : Threat Modeling
Catégorie : Enterprise Risk Management (ERM)
Catégorie : Threat Detection
Catégorie : Cyber Risk
Catégorie : Risk Management
Catégorie : Stakeholder Communications
Catégorie : Security Management

Détails à connaître

Certificat partageable

Ajouter à votre profil LinkedIn

Récemment mis à jour !

mars 2026

Évaluations

22 devoirs

Enseigné en Anglais

Découvrez comment les employés des entreprises prestigieuses maîtrisent des compétences recherchées

En savoir plus sur Coursera pour les affaires

logos de Petrobras, TATA, Danone, Capgemini, P&G et L'Oreal

Élaborez votre expertise du sujet

Ce cours fait partie de la Spécialisation "CISM Certification Preparation"

Lorsque vous vous inscrivez à ce cours, vous êtes également inscrit(e) à cette Spécialisation.

Apprenez de nouveaux concepts auprès d'experts du secteur
Acquérez une compréhension de base d'un sujet ou d'un outil
Développez des compétences professionnelles avec des projets pratiques
Obtenez un certificat professionnel partageable

Il y a 4 modules dans ce cours

Still identifying risks, but unable to quantify or justify them to leadership?

Listing threats isn’t enough. Senior roles require people who can judge impact, prioritize exposure, choose responses, and communicate risk in business terms. And that’s precisely what this course develops. This Information Security Risk Management course develops CISM-aligned risk analysis and decision-making skills. You will learn to: • Establish risk appetite, tolerance, as well as enterprise context • List assets, threats, vulnerabilities, & control gaps • Build structured risk registers and risk scenarios • Apply qualitative and quantitative methods (ALE, FAIR, PRA) • Use NIST and ISO 27005 risk assessment frameworks • Select responses and report risk effectively to stakeholders Unlike other courses, this CISM course combines enterprise frameworks with practical risk analysis techniques. In the end, you’ll confidently assess, rank, and communicate risk to support strategic decisions. Enroll now and become a risk-driven security leader.

This module provides an overview of risk management, covering its key concepts, types of risks, and the risk management framework. You'll also learn about risk appetite, tolerance, and the phases of enterprise risk management.

Inclus

9 vidéos1 lecture4 devoirs

9 vidéosTotal 36 minutes

Course Introduction2 minutes
Risk Management Overview4 minutes
Influencing Factors for Risk Management Program3 minutes
Risk Universe / Capacity / Appetite / Tolerance5 minutes
Risk Types5 minutes
Risk Management Framework4 minutes
Risk Management Functions5 minutes
Risk Management in IT Lifecycle4 minutes
Enterprise Risk Management Phases4 minutes

1 lectureTotal 10 minutes

Building a Risk Management Framework10 minutes

4 devoirsTotal 72 minutes

Checkpoint Quiz16 minutes
Checkpoint Quiz16 minutes
Proficiency Quiz20 minutes
Proficiency Quiz20 minutes

This module focuses on identifying and assessing risks, including techniques for asset identification, threat analysis, and documenting risks in a risk register. You'll also learn about identifying vulnerabilities and control deficiencies.

Inclus

16 vidéos1 lecture6 devoirs

16 vidéosTotal 64 minutes

Module Introduction1 minute
Risk Identification6 minutes
Risk Identification Techniques5 minutes
Risk Identification Process5 minutes
Asset Identification Process5 minutes
Identifying Threats & Their Types6 minutes
Identifying Existing Controls3 minutes
Details of Vulnerabilities4 minutes
Identifying Control Deficiency Using Baselines4 minutes
Identifying Consequences4 minutes
Risk Documentation2 minutes
Sample Risk Register4 minutes
Role of ISM in Risk Identification4 minutes
Risk Scenarios to Transition from Risk Identification to Risk Analysis3 minutes
Risk Scenario Factors6 minutes
How Risk Scenarios are Linked to Risk Analysis3 minutes

1 lectureTotal 10 minutes

Analyzing Vulnerabilities and Control Deficiencies10 minutes

6 devoirsTotal 135 minutes

Checkpoint Quiz24 minutes
Checkpoint Quiz24 minutes
Checkpoint Quiz12 minutes
Proficiency Quiz30 minutes
Proficiency Quiz30 minutes
Proficiency Quiz15 minutes

This module covers both qualitative and quantitative risk analysis methods, including tools like ALE and FAIR. You'll also explore risk ranking, evaluation, and the risk assessment methodologies used in frameworks like NIST and ISO 27005.

Inclus

16 vidéos6 devoirs

16 vidéosTotal 70 minutes

Module Introduction1 minute
Risk Analysis Overview5 minutes
Risk Analysis Methods6 minutes
Qualitative Risk Analysis – Overview5 minutes
Quantitative Risk Analysis – Overview5 minutes
Annualized Loss Expectancy (ALE)4 minutes
FAIR (Factor Analysis of Information Risk)6 minutes
HARM—Holistic Approach to Risk Management5 minutes
Probabilistic Risk Assessment (PRA)4 minutes
Other Risk Analysis Methods5 minutes
Risk Ranking4 minutes
Correlating Risk Analysis, Ranking, and Evaluation3 minutes
Risk Evaluation5 minutes
Risk Assessment4 minutes
NIST Risk Assessment Methodology5 minutes
ISO 27005 Risk Assessment Process Steps4 minutes

6 devoirsTotal 135 minutes

Checkpoint Quiz12 minutes
Checkpoint Quiz24 minutes
Checkpoint Quiz24 minutes
Proficiency Quiz15 minutes
Proficiency Quiz30 minutes
Proficiency Quiz30 minutes

This module teaches risk response options, workflows, and decision-making between risk acceptance and ignorance. You'll also learn how to communicate risks effectively to stakeholders and monitor ongoing risk management efforts.

Inclus

13 vidéos1 lecture6 devoirs

13 vidéosTotal 43 minutes

Module Introduction1 minute
Risk Response Options5 minutes
Risk Response Workflow4 minutes
Selecting Risk Response6 minutes
Risk Acceptance vs Risk Ignorance3 minutes
What Is Risk Ownership?2 minutes
Relationship Between Risk and Control4 minutes
Risk Owner vs Control Owner4 minutes
Risk Monitoring2 minutes
Risk Reporting2 minutes
Reporting Risk Changes to Stakeholders3 minutes
Risk Communication, Awareness, and Consulting3 minutes
Summary3 minutes

1 lectureTotal 10 minutes

Defining Risk Ownership and Control Structures10 minutes

6 devoirsTotal 99 minutes

Checkpoint Quiz16 minutes
Checkpoint Quiz12 minutes
Checkpoint Quiz16 minutes
Proficiency Quiz20 minutes
Proficiency Quiz15 minutes
Proficiency Quiz20 minutes

Obtenez un certificat professionnel

Ajoutez ce titre à votre profil LinkedIn, à votre curriculum vitae ou à votre CV. Partagez-le sur les médias sociaux et dans votre évaluation des performances.

Instructeur

LearnKartS

208 Cours253 499 apprenants

Offert par

LearnKartS

En savoir plus sur Security

Statut : Essai gratuit
Packt
Security and Risk Management
Cours
Statut : Essai gratuit
Whizlabs
CISM: Enterprise Risk Leadership
Cours
Packt
Information Security Risk Management for ISO 27001/ISO 27002
Cours
Statut : Essai gratuit
John Wiley & Sons
Information Security Management Fundamentals
Cours

Pour quelles raisons les étudiants sur Coursera nous choisissent-ils pour leur carrière ?

Felipe M.

Étudiant(e) depuis 2018

’Pouvoir suivre des cours à mon rythme à été une expérience extraordinaire. Je peux apprendre chaque fois que mon emploi du temps me le permet et en fonction de mon humeur.’

Jennifer J.

Étudiant(e) depuis 2020

’J'ai directement appliqué les concepts et les compétences que j'ai appris de mes cours à un nouveau projet passionnant au travail.’

Larry W.

Étudiant(e) depuis 2021

’Lorsque j'ai besoin de cours sur des sujets que mon université ne propose pas, Coursera est l'un des meilleurs endroits où se rendre.’

Chaitanya A.

’Apprendre, ce n'est pas seulement s'améliorer dans son travail : c'est bien plus que cela. Coursera me permet d'apprendre sans limites.’

Profitez de plus de 10 000 programmes grâce à notre offre spéciale pour la Fête du Travail
Get Coursera Plus
Commencez par réaliser des économies simples pour vos équipes qui travaillent dur
Save 30% today

Foire Aux Questions

You will be taught how toidentify, analyze,assess,and respond tosecurityrisks.This CISM certification training course typicallyaddressesrisk management frameworks, identification techniques, vulnerability analysis, methods for quantitative and qualitative risk analysis, riskevaluationand response options as well ashow tocommunicateeffectively about risks.

Yes!It’ssuitable for beginnersand seasonedprofessionals. You begin with the basics of risk management and work on to more advanced topics such asrisk ranking, vulnerability analysis, andusing ERM systems in practice.

ThisCISM trainingcourse willlook intodifferent risk responses such as acceptance, avoidance, andmitigation.You will learn how to choose the right response based on risk ranking andorganizationalcapacity and recognize the importanceof risk ownership,as well as controls in mitigating security risks.

To access course materials, assignments, and earn a Certificate, you'll need to purchase the Certificate experience when you enroll in a course. Eligible learners may also have the option to start with a Free Trial. Some courses may also offer a Full Course, No Certificate option. This lets you access course materials, submit required assessments, and receive a final grade, but you won't be able to earn or purchase a Certificate.