Risk Management requires us to predict future events and determine what to do about them in priority order. But Risk is a both a complex concept and a human perception, that organisations can spend large sums of money, time and resources assessing with very uncertain, sometimes meaningless) results. They often do so in isolated silos and fail to understand the systemic and conflicted nature of risk in a complex business environment.
This Advanced module works holistically through the entire risk lifecycle from clearly defining risk context, through risk analysis (identifying, assessing, and evaluating risk and each its elements) through to innovative risk treatment strategies and management techniques. At each step, we will seek to understand what exactly risk means in our own context, and (with the help of SABSA techniques) identify the best means to assess and communicate risk with the greatest balance of credibility, in the shortest possible time, and with the least possible effort.
It will enable the candidate to architect Governance and assign practical risk ownership, decision-making authority, accountability and responsibility, while ensuring that risk stakeholders understand their dependency upon others. The Assurance module of the course will enable the Architect to create their own assurance framework to ensure the organisation and its stakeholders have confidence about their Enterprise Security, Governance & Risk Architectures through-life.