Risk assessment

Duration: 1 day

Requirements: Basic knowledge of IT security process

Description:
The goal of this course is to learn a founded methodology for risk assessment in IT security. The theoritical basics and example cases will be reviewed in common and some example risk assessment will be shown. Thereby you will be able to apply risk assessment as a controlling tool in iT security and to conduct an efficient risk management.

Content:
- Goal of risk assessment
- Knowledge of the methodology : quantitative and qualitative risk assessment
- Nomenclature of risk assessment
- Content of risk assessment
- Classification of Mitigating Controls
- Risk assessment as a controlling tool in IT security
- Business-enabler: process oriented risk management

Maximum number of participants: 8

TROOPERS11 - New date
TROOPERS12 takes place in March, 29th - 23rd, 2012 in Heidelberg. Mark your calendars now and sign up for the official TROOPERS newsletter to stay up-to-date. [More]
Security Testing
Testing IT security is one of the core competences of ERNW. Many of our customers get their IT infrastructure and (Web) applications checked on a regular basis. This may either be done on a very technical level in terms of penetration testing or in a more formal way in terms of general security audits, during which we verify the IT Security Compliance of your company compared to best practices according to ISO17799/ISO27001 ... [More]
Research & Technology-Evaluation
Research is the foundation of our Know-How leadership. The objections of this work is to unveil security flaws and vulnerabilities in protocols, technologies and products. Some findings derive from design-flaws, some from poor implementation on a technical level.... [More]