How does this course differ from other risk management courses?

This course combines theoretical knowledge with practical tools, such as risk registers and quantitative approaches (ALE & PRA), as well as frameworks like ISO 27005 and NIST.You’llalso discover how to enforce risk management in the IT lifecycle, providing practical applicability.

Will I be able to apply risk management frameworks in my role?

Absolutely! This course dives deep into frameworks like Enterprise Risk Management (ERM) and NIST Risk Assessment, helping you apply these structures toidentifyvulnerabilities, assess potential impacts, and create actionable risk management plans in your workplace.

What will I get if I subscribe to this Specialization?

When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.

Is financial aid available?

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

Information Security Risk Management

通过 Coursera Plus 提高技能，仅需 239 美元/年（原价 399 美元）。立即节省

Information Security Risk Management

本课程是 CISM Certification Preparation 专项课程的一部分

位教师：LearnKartS

包含在中

了解更多

4个模块

深入了解一个主题并学习基础知识。

1 周完成

在 10 小时一周

灵活的计划

自行安排学习进度

4个模块

深入了解一个主题并学习基础知识。

1 周完成

在 10 小时一周

灵活的计划

自行安排学习进度

您将学到什么

Gain a deep understanding of Risk Management principles,includingrisk appetite,tolerance, and capacity to drive informed decision-making.
Master risk identification techniques to assess threats, vulnerabilities, and existing controls, and create comprehensive risk registers.
Learn qualitative and quantitative risk analysis methods like ALE, FAIR, and PRA to evaluate and prioritize risks effectively.
Develop risk response strategies, define ownership, & build communication frameworks to monitor, report, & mitigate risks across the organization.

要了解的详细信息

可分享的证书

添加到您的领英档案

了解顶级公司的员工如何掌握热门技能

了解关于 Coursera for Business 的更多信息

Petrobras, TATA, Danone, Capgemini, P&G 和 L'Oreal 的徽标

积累特定领域的专业知识

本课程是 CISM Certification Preparation 专项课程专项课程的一部分

在注册此课程时，您还会同时注册此专项课程。

向行业专家学习新概念
获得对主题或工具的基础理解
通过实践项目培养工作相关技能
获得可共享的职业证书

该课程共有4个模块

Still identifying risks, but unable to quantify or justify them to leadership?

Listing threats isn’t enough. Senior roles require people who can judge impact, prioritize exposure, choose responses, and communicate risk in business terms. And that’s precisely what this course develops. This Information Security Risk Management course develops CISM-aligned risk analysis and decision-making skills. You will learn to: • Establish risk appetite, tolerance, as well as enterprise context • List assets, threats, vulnerabilities, & control gaps • Build structured risk registers and risk scenarios • Apply qualitative and quantitative methods (ALE, FAIR, PRA) • Use NIST and ISO 27005 risk assessment frameworks • Select responses and report risk effectively to stakeholders Unlike other courses, this CISM course combines enterprise frameworks with practical risk analysis techniques. In the end, you’ll confidently assess, rank, and communicate risk to support strategic decisions. Enroll now and become a risk-driven security leader.

This module provides an overview of risk management, covering its key concepts, types of risks, and the risk management framework. You'll also learn about risk appetite, tolerance, and the phases of enterprise risk management.

涵盖的内容

9个视频1篇阅读材料4个作业

9个视频总计36分钟

Course Introduction 2分钟
Risk Management Overview 4分钟
Influencing Factors for Risk Management Program 3分钟
Risk Universe / Capacity / Appetite / Tolerance 5分钟
Risk Types 5分钟
Risk Management Framework 4分钟
Risk Management Functions 5分钟
Risk Management in IT Lifecycle 4分钟
Enterprise Risk Management Phases 4分钟

1篇阅读材料总计10分钟

Building a Risk Management Framework 10分钟

4个作业总计72分钟

Checkpoint Quiz 16分钟
Checkpoint Quiz 16分钟
Proficiency Quiz 20分钟
Proficiency Quiz 20分钟

This module focuses on identifying and assessing risks, including techniques for asset identification, threat analysis, and documenting risks in a risk register. You'll also learn about identifying vulnerabilities and control deficiencies.

涵盖的内容

16个视频1篇阅读材料6个作业

16个视频总计64分钟

Module Introduction 1分钟
Risk Identification 6分钟
Risk Identification Techniques 5分钟
Risk Identification Process 5分钟
Asset Identification Process 5分钟
Identifying Threats & Their Types 6分钟
Identifying Existing Controls 3分钟
Details of Vulnerabilities 4分钟
Identifying Control Deficiency Using Baselines 4分钟
Identifying Consequences 4分钟
Risk Documentation 2分钟
Sample Risk Register 4分钟
Role of ISM in Risk Identification 4分钟
Risk Scenarios to Transition from Risk Identification to Risk Analysis 3分钟
Risk Scenario Factors 6分钟
How Risk Scenarios are Linked to Risk Analysis 3分钟

1篇阅读材料总计10分钟

Analyzing Vulnerabilities and Control Deficiencies 10分钟

6个作业总计135分钟

Checkpoint Quiz 24分钟
Checkpoint Quiz 24分钟
Checkpoint Quiz 12分钟
Proficiency Quiz 30分钟
Proficiency Quiz 30分钟
Proficiency Quiz 15分钟

This module covers both qualitative and quantitative risk analysis methods, including tools like ALE and FAIR. You'll also explore risk ranking, evaluation, and the risk assessment methodologies used in frameworks like NIST and ISO 27005.

涵盖的内容

16个视频6个作业

16个视频总计70分钟

Module Introduction 1分钟
Risk Analysis Overview 5分钟
Risk Analysis Methods 6分钟
Qualitative Risk Analysis – Overview 5分钟
Quantitative Risk Analysis – Overview 5分钟
Annualized Loss Expectancy (ALE) 4分钟
FAIR (Factor Analysis of Information Risk) 6分钟
HARM—Holistic Approach to Risk Management 5分钟
Probabilistic Risk Assessment (PRA) 4分钟
Other Risk Analysis Methods 5分钟
Risk Ranking 4分钟
Correlating Risk Analysis, Ranking, and Evaluation 3分钟
Risk Evaluation 5分钟
Risk Assessment 4分钟
NIST Risk Assessment Methodology 5分钟
ISO 27005 Risk Assessment Process Steps 4分钟

6个作业总计135分钟

Checkpoint Quiz 12分钟
Checkpoint Quiz 24分钟
Checkpoint Quiz 24分钟
Proficiency Quiz 15分钟
Proficiency Quiz 30分钟
Proficiency Quiz 30分钟

This module teaches risk response options, workflows, and decision-making between risk acceptance and ignorance. You'll also learn how to communicate risks effectively to stakeholders and monitor ongoing risk management efforts.

涵盖的内容

13个视频1篇阅读材料6个作业

13个视频总计43分钟

Module Introduction 1分钟
Risk Response Options 5分钟
Risk Response Workflow 4分钟
Selecting Risk Response 6分钟
Risk Acceptance vs Risk Ignorance 3分钟
What Is Risk Ownership? 2分钟
Relationship Between Risk and Control 4分钟
Risk Owner vs Control Owner 4分钟
Risk Monitoring 2分钟
Risk Reporting 2分钟
Reporting Risk Changes to Stakeholders 3分钟
Risk Communication, Awareness, and Consulting 3分钟
Summary 3分钟

1篇阅读材料总计10分钟

Defining Risk Ownership and Control Structures 10分钟

6个作业总计99分钟

Checkpoint Quiz 16分钟
Checkpoint Quiz 12分钟
Checkpoint Quiz 16分钟
Proficiency Quiz 20分钟
Proficiency Quiz 15分钟
Proficiency Quiz 20分钟

获得职业证书

将此证书添加到您的 LinkedIn 个人资料、简历或履历中。在社交媒体和绩效考核中分享。

位教师

LearnKartS

145 门课程 187,143 名学生

提供方

LearnKartS

从 Security 浏览更多内容

Packt
Security and Risk Management
课程
Packt
Information Security Risk Management for ISO 27001/ISO 27002
课程
Packt
Certified Information Security Manager (CISM)
课程
Packt
Risk Management for Cybersecurity and IT Managers
课程

人们为什么选择 Coursera 来帮助自己实现职业发展

Felipe M.

自 2018开始学习的学生

''能够按照自己的速度和节奏学习课程是一次很棒的经历。只要符合自己的时间表和心情，我就可以学习。'

Jennifer J.

自 2020开始学习的学生

''我直接将从课程中学到的概念和技能应用到一个令人兴奋的新工作项目中。'

Larry W.

自 2021开始学习的学生

''如果我的大学不提供我需要的主题课程，Coursera 便是最好的去处之一。'

Chaitanya A.

''学习不仅仅是在工作中做的更好：它远不止于此。Coursera 让我无限制地学习。'

通过 Coursera Plus 开启新生涯

无限制访问 10,000+ 世界一流的课程、实践项目和就业就绪证书课程 - 所有这些都包含在您的订阅中

了解更多

通过在线学位推动您的职业生涯

获取世界一流大学的学位 - 100% 在线

探索学位

加入超过 3400 家选择 Coursera for Business 的全球公司

提升员工的技能，使其在数字经济中脱颖而出

了解更多

常见问题

You will be taught how toidentify, analyze,assess,and respond tosecurityrisks.This CISM certification training course typicallyaddressesrisk management frameworks, identification techniques, vulnerability analysis, methods for quantitative and qualitative risk analysis, riskevaluationand response options as well ashow tocommunicateeffectively about risks.

Yes!It’ssuitable for beginnersand seasonedprofessionals. You begin with the basics of risk management and work on to more advanced topics such asrisk ranking, vulnerability analysis, andusing ERM systems in practice.

ThisCISM trainingcourse willlook intodifferent risk responses such as acceptance, avoidance, andmitigation.You will learn how to choose the right response based on risk ranking andorganizationalcapacity and recognize the importanceof risk ownership,as well as controls in mitigating security risks.

To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.