Identifying and Managing Risk

Course Description

Students examine information security risk management principles and methodologies used to identify, analyze, and manage risk within organizational environments. Students evaluate common risk analysis approaches, including their characteristics, advantages, limitations, and practical applications. The course explores diverse sources of risk such as external threat actors, intentional and unintentional insider actions, system misconfigurations, and environmental or structural factors. Students identify vulnerabilities across hardware, software, cloud environments, data assets, and operational procedures that contribute to organizational risk. Through applied labs and scenario-based activities, students perform qualitative and quantitative risk assessments; apply vulnerability testing tools; and evaluate the role of policies, controls, and emerging automation and artificial intelligence-supported techniques in reducing and monitoring cybersecurity risk. Prerequisite: IAS5025

Code

IAS5030

Credits

4

Subject

IAS

Programs That Include This Course

• Master's Master of Science in Information Technology Cybersecurity
• Master's Master of Science in MS in Cybersecurity Applied AI MS in Cybersecurity Applied AI