This course enables leaders to define and assess business risks related to cybersecurity. Students are exposed to complex analysis and decision-making with consideration of converged catalysts (e.g., cyber, physical, informational) impacting operations. They will gain an appreciation for a standard taxonomy and methods to calculate risk. Instruction includes discussion of risk management frameworks outside of NIST (e.g., OCTAVE FORTE) and Factor Analysis of Information Risk (FAIR) for risk assessment.
It also teaches leaders methods to identify, define and measure risk to their organization from multi-faceted threats incorporating cyber, physical and other means. They begin with a module on critical thinking to open their minds to later modules, which discuss concepts outside standard risk management frameworks. The final modules familiarize students with common language taxonomies, various risk management frameworks and FAIR.
