‘Risk’ reflects the likelihood of events occurring and the impact those have on an enterprise. Meanwhile, risk management is the system of balancing the risk associated with business activities with an adequate level of control that will enable the business to meet its objectives. It is also worth mentioning that an ‘information system’ refers to a formal, structural and socio-technical method for collecting, processing, distributing and storing data. Therefore, from the socio-technical viewpoint, the components of an information system are the people, business processes, structure and information technology (IT).

This free online course highlights the guiding principles of effective risk management and the administrative roles and responsibilities of an information systems risk manager. You will study the frameworks, standards and practices and why they matter in information systems management. Next, we will consider the three primary objectives of risk governance and how risk appetite relates to varying frequency and magnitude risk scenarios. Finally, we present some applicable guidelines for risk appetite, tolerance and scenario development activities and enablers.

The last section will research several case studies and practice questions to help you prepare for the information risk manager certification. We will elaborate on discussions that explain the five categories of risk factors, competence and competency levels. Additionally, we will consider some framework references for risk management capability. Here’s your chance to identify the qualitative, quantitative and high-impact diagnostic methods for information technology risks. Moreover, we will examine the threats and opportunities in enterprise use of IT. Find out about the response process, the essentials of risk monitoring and the capability maturity models. Enrol on this course today and become certified!