IT Security Risk Management: A Lifecycle Approach

Overview

Delivery method

Virtual classroom

Duration

2 days

Audience

EX minus 1

Executives

Managers

Access to Information and Privacy Specialists

Information Technology Specialists

Security Specialists

Specialists

Description

This instructor-led course introduces the concept of cyber security risk management for the Government of Canada (GC). The course is based on the principles and practices detailed in the guidance document “IT Security Risk Management: A Lifecycle Approach” (ITSG-33). It focuses on the high-level processes in Annex 1 which identify business needs for security and define the IT security risk management environment. It also provides a brief overview of the Information System Security Implementation Process (ISSIP). Scenario-based discussions and exercises are included to support situating the processes within a departmental context. Upon completing this course, participants will be familiar with the risk management process, methodology, and key concepts.

Note: This course is part of the boot camp 910 - IT Security Risk Management. As a result, you are not required to register for this course if you are planning to register for the boot camp.

Learning Objectives

• Apply IT risk management within a GC context as defined in CSE guidance ITSG-33

• Identify the initial steps to integrating risk management guidance within your department/agency

Target Audience

Project/Program Managers, IT Security Designers, Architects, Engineers, and Managers.

Prerequisite(s)

Prior to attending, participants should have a working knowledge of GC Security Risk Management. To satisfy this requirement, we recommend participants take course 601 - Introduction to IT Security Management.

Notes

The Digital Enterprise Skilling (DES) program provides Shared Services Canada (SSC) employees with the knowledge and skills required to accelerate digital adoption, improve IT services delivery, and adapt to the workforce’s needs of the future. If you have not registered as an SSC Digital Enterprise Skilling (DES) participant yet, sign up here: Digital Enterprise Skilling (sharepoint.com)

Legacy course code: 104