This event is history, please check out the List of Upcoming Seminars, or send us an email

Check out our related in-house workshops:

 Learning Objectives

Why Focus on IT Risk ?

The current economy brings with it a new spectrum of IT-related business risk. Economic hard times, emerging technologies, the extended enterprises all create their own challenges for IT. The impacts of IT-related risk are also constantly increasing, such as those of a bank’s ATM network not being available, major project delays or failures, reputational impacts of the loss of confidential customer data, or missed business opportunities due to an inflexible enterprise architecture. These and other factors are driving many organisations to optimise the management of IT risk.

The Risk IT Framework

ISACA has launched the first version of the Risk IT framework on November 20, 2009. Risk IT is designed to help enterprises manage IT-related risk and to make appropriate risk-adjusted decisions. The framework explains IT risk and enables users to integrate IT risk into the overall enterprise risk management of the organisation; make well-informed decisions about the extent of risk, risk appetite and the risk tolerance of the enterprise; and understand how to respond to the risk.

The Risk IT framework is aligned with major Enterprise Risk Management standards and translates their principles for IT. IT Risk is considered very broadly and includes IT Benefit/Enablement risk, IT Program and Project Delivery Risk and IT Operations and Service Delivery Risk.

Workshop Objectives:

At the end of this 2-day practical workshop, participants will:

• Understand the nature of IT risk and how it applies in their own organisations and the major principles of IT risk management
• Understand the broad range of IT risks, beyond purely IT operational and IT security risks
• Understand how the ISACA Risk IT process model can help them to manage IT risk
• Have become familiar with the practical guidance and techniques available in the Risk IT Practitioner’s Guide to assist in practically implementing IT risk management
• Have applied and practised all of the learning concepts in a practical and comprehensive case study

Workshop Format:

The workshop format is highly interactive with an emphasis on practical application of theory and techniques. This will be achieved through a mixture of short lecturing sessions and case study work:

• The theoretical part, where Risk Management and the Risk IT Framework are explained in short sessions – this part will take 1/3 of the time.
• A comprehensive case study, where all parts and techniques of IT Risk Management and Risk IT are applied, building upon the knowledge acquired during the session – this part will take 2/3 of the time

Who Should Attend this Workshop ?

This course will significantly benefit IT Managers, Enterprise Risk Managers, Corporate Security Officers, Information Security Officers and other Security Professionals, Auditors, Consultants and anyone who wants to gain insight and experience in risk management and the Risk IT Framework, in particular what it is and how to use it.

 Full Programme

The major topics of this workshop include:

• IT risk, the link between IT Risk Management on one hand and IT governance and enterprise risk management on the other hand;
• positioning of IT Risk between other risk management standards (ISO 31000, COSO ERM, etc);
• the Risk IT framework and its components; risk responsibilities and accountabilities;
• IT risk scenarios;
• IT risk analysis;
• risk response;
• risk reporting and communication;
• how to use existing best practice frameworks like CobiT and Val IT for effective IT Risk Management

The workshop content, consisting of some theory and many exercises, is spread over 2 days:

• General introduction to IT risk and Risk Management principles
• IT Risk Management positioned in relation to IT Governance – positioning of Risk IT versus COBIT and Val IT in the IT Governance best practice landscape; discussion on how to combine the use these frameworks to achieve good IT Governance practices
• Overview and short description of some major applicable standards and frameworks (COSO ERM, ISO31000)
• The Risk IT Framework - discussion of the IT Risk Management process model and its components
• Exercises: describe and document a risk management process and roles and responsibilities
• Exercise: assess a risk management process
• Wrap-up and Q/A

• The Risk IT Practitioner Guide - discussion of this practical guide for IT Risk Management
• Exercises: describe risk appetite and create a risk taxonomy
• Exercise: define IT risk Scenarios and perform risk analysis
• Exercise: define a risk response
• Exercise: create risk profile of an organisation and develop a communication/reporting scheme.
• Wrap-up and Q/A

 Speakers

Questions about this ? Interested but you can't attend ? Send us an email !