The course content addresses the following topics:
- Cybersecurity as a strategic risk
- Understanding risk
- The digital attack surface and equifax
- The CIA (Classifying Information Assets) triad
- Risk tolerance and appetite
- Choosing frameworks
- Adapting frameworks
- Assessing cyber maturity
- Making smart cybersecurity investments
- The human factor
- Cybersecurity risk assessment
- Cybersecurity risk identification and assessment
- Cybersecurity risk register
- Cybersecurity risk communication
- Building a risk-response strategy
- Strategic approaches to risk mitigation
- Monitoring and reporting