我可以在手機或平板電腦上學習嗎？

是的，課程全天候支援iOS、Android、平板及電腦裝置。

是否提供33種語言的字幕？

是的，所有影片課程均支援33種語言的AI字幕和文字稿。

完成課程有時間限制嗎？

沒有，您將獲得終身存取權限，可自主安排學習進度。

我可以在多長時間內存取課程材料？

註冊後，您將終身無限制地存取所有視訊講座、可下載資源和未來的課程更新，無需額外付費。

如果遇到困難我可以向老師提問嗎？

絕對地。您可以直接在課程問答討論區發布您的問題，講師和同學會及時提供指導和解答。

如果課程不符合我的需求，是否有退費政策？

是的，Lucebra 提供 7 天退款政策，前提是您觀看的課程內容少於總課程內容的 20%。核准的退款將直接存入您的 Lucebra Credits 餘額，以用於將來的平台購買。

我可以在行動裝置或平板電腦上觀看課程嗎？

是的，所有 Lucebra 課程均完全響應並經過最佳化，可在電腦、筆記型電腦、平板電腦和行動裝置上無縫播放。

課程有字幕或隱藏式字幕嗎？

是的，視訊講座具有多達 99 種語言的人工智慧翻譯字幕，讓世界各地的學習者可以用他們喜歡的語言無縫地跟隨。

在開始本課程之前是否需要任何先決條件？

除非課程概述中註明了具體的事先要求，否則您只需要基本的電腦知識和網路連線。所有主題都是從頭開始逐步教授的。

資訊科技與軟體/網路與安全/風險管理

ISO 27005:2022: Information Security Risk Management

Risk Identification, Analysis, Evaluation, Treatment & Acceptance | Context, Criteria & Monitoring

所有級別 • 48 講座 • 終身訪問

Dr. Amar Massoud

認證碩士導師

ISO 27005:2022: Information Security Risk Management

拖車

認識您的導師：Dr. Amar Massoud

18 ms

5.0 / 5.0

全球評級

美国英语

99 種語言字幕

4小時 25分

總內容

你將學到什麼

Understand and apply ISO 27005:2022 methodologies for information security risk assessments.

Identify, analyze, and evaluate risks to information security within an organizational context.

Develop and implement effective risk treatment plans aligned with ISO 27005:2022 guidelines.

Continuously monitor and review risk management processes for ongoing improvement and compliance.

課程內容

8 部分 • 48 講座 • 04:25:24 總長度

Quantitative Approach

05:04

Quantitative Likelihood Scale

04:47

Explore how a logarithmic likelihood scale converts event frequency into scale values to quantify information security risk and prioritize actions, with examples from data breaches, unauthorized access, and regulatory risks.

Quantitative Consequence Scale

06:16

Quantitative Level of Risks

06:10

Risk Acceptance Criteria

06:21

Clarify how risk acceptance criteria establish tolerance thresholds using a color coded risk matrix to classify risks as red, amber, or green, with governance for authorization and ongoing reassessment.

Quantitative Risk Acceptance Matrix

04:41

Qualitative Risk Assessment Approach

02:52

Consequence Criteria

06:38

Qualitative Consequence Scale

05:42

Likelihood Criteria

03:02

Qualitative Likelihood Scale

05:18

Criteria for Determining the Level of Risk

02:42

Qualitative Level of Risks

05:30

Choosing an Appropriate Method

03:02

Information Security Risk Assessment Process

03:42

Risk Assessment Methodologies

08:09

Identifying Information Security Risks

04:46

Asset Based Risk Identification

04:58

Identify Vulnerabilities and Threats

08:54

HealthSecure Assets Risk Identification

02:11

Identifying Risk Owners

03:22

Analysing Information Security Risks

02:45

Assessing Potential Consequences

05:28

Assess consequences of information security risks under ISO 27005:2022 by analyzing risk scenarios, evaluating confidentiality, integrity, and availability impacts, reviewing controls, and guiding risk mitigation.

Assessing Likelihood

06:34

Determining the Level of Risks

05:26

Determine risk levels in ISO 27005:2022 through a process that combines likelihood and consequences to rank risks for treatment decisions, including EHR software and cloud servers.

Prioritizing the Analyzed Risks for Risk Treatment

03:27

Event Based Risk Identification

09:32

Information Security Risk Treatment

11:16

Producing the Statement of Applicability

05:43

Information Security Risk Treatment Plan

08:44

Residual Risks

05:18

每週學習計劃

規劃您的學習之旅

AI根據您的可用時間生成個人化時間表

要求

This course is designed to be accessible to beginners. No advanced technical knowledge is required.

Basic familiarity with information security concepts will be helpful but not essential.

The course will cover foundational elements, making it suitable for those new to risk assessment in the context of ISO standards.

目標受眾

Information Security Professionals: Ideal for security analysts, managers, and consultants seeking to deepen their understanding of risk assessment aligned with ISO standards.

IT Professionals: IT staff responsible for managing and safeguarding digital assets, especially those involved in developing or maintaining an Information Security Management System.

Compliance Officers and Auditors: Professionals ensuring regulatory compliance or conducting internal audits, particularly in sectors with strict data protection requirements.

Business Managers and Executives: Decision-makers who need to understand organizational risk landscapes and make informed information security investment decisions.

關於本課程

Course Overview: Dive into the world of risk assessment in line with ISO/IEC 27005:2022 standards in our comprehensive course. This training is uniquely designed to provide a blend of theoretical knowledge and practical application, using a fictional model company, "HealthSecure Inc.," as a continuous case study throughout the course. What You'll Learn:

Fundamentals of ISO 27005:2022: Understand the core concepts, principles, and frameworks of ISO 27005:2022.
Risk Assessment Techniques: Learn to identify, analyze, and evaluate information security risks using proven methodologies.
Practical Application: Apply your learning to real-life scenarios through the HealthSecure Inc. case study, encompassing various aspects of risk assessment and treatment.
Use of Tools and Templates: Gain hands-on experience with risk assessment tools and templates that can be adapted to your professional context.

Course Features:

Interactive Learning: Engaging content including lectures, interactive sessions, and group discussions.
HealthSecure Inc. Case Study: A comprehensive use case running throughout the course, providing practical insights into the application of risk assessment in a business environment.
Hands-On Assignments: Practical assignments and projects that simulate real-world risk assessment challenges.
Resource Toolkit: Access to a range of templates and tools for conducting risk assessments, allowing for immediate application in your workplace.
Expert Instructors: Learn from experienced professionals with extensive knowledge in information security and risk management.

Who Should Enroll: This course is ideal for IT and cybersecurity professionals, compliance officers, risk managers, business leaders, and anyone interested in mastering the art and science of ISO 27005:2022 risk assessment. Course Goals: By the end of this course, participants will be able to confidently conduct risk assessments and develop comprehensive risk treatment plans in alignment with ISO 27005:2022 standards, leveraging the practical experience gained from the HealthSecure Inc. case study. Join us to enhance your skills in information security risk assessment and contribute to the robust security posture of your organization.

職業發展機會與目標職位

掌握前沿實務技能，勝任全球高薪核心職務

就業就緒型課程

可應徵的目標職位

Full Stack Software Engineer

Backend Systems Developer

Frontend Application Specialist

Automation & Scripting Engineer

預估年薪範圍

$90,000 – $145,000 / yr

全球產業需求

High Global Tech Demand

掌握的核心關鍵技能

Production Code Architecture

RESTful & Modern API Design

State Management & UI Scaling

Debugging & Automated Testing

* 估算數據基於全球科技產業薪酬指標與市場招聘報告。

認識您的講師

5.0 評級

5 學生

看完整資料

Dr. Amar Massoud

主要導師

PhD in computer science and IT manager with 36 years technical experience in various fields including IT Security, IT Governance, IT Service Management , Software Development, Project Management, Business Analysis and Software Architecture. I hold 80+ IT certifications such as : ITIL 4 Master, ITIL 3 Expert ISO 27001 Auditor, ComptIA Security+, GSEC, CEH, ECSA, CISM, CISSP, CISA PGMP, MSP PMP, PMI-ACP, Prince2 Practitioner, Praxis, Scrum Master COBIT 2019 Implementor, COBIT 5 Assessor/Implementer TOGAF certified Lean Specialist, VSM Specialist PMI RMP, ISO 31000 Risk Manager, ISO 22301 Lead Auditor PMI-PBA, CBAP Lean Six Sigma Black Belt, ISO 9001 Implementer Azure Administrator, Azure DevOps Expert, AWS Practitioner And many more....