Day 1: Start of a risk assessment with OCTAVE

Concepts and definitions related to risk management

Standards, frameworks and methodologies in risk management

Presentation of OCTAVE

Phase 1 - Process 1 to 3 (Understanding the Organization)

Phase 1 - Process 4 (Create profile threats)

Phase 2 - Process 5 (identification of key components)

Day 2: Assessment of vulnerabilities and risk, according to OCTAVE

Phase 2 - Process 5 (Continued)

Phase 2 - Process 6 (Evaluation of selected components)

Phase 3 - Process 7 (Conduct the risk assessment)

Phase 3 - Process 8 (Development of Protection Strategy)

Day 3: The OCTAVE Method Implementation approach and conclusion

Phase 3 – Process 8 (Development of a Protection Strategy – cont.) 

The OCTAVE Method Implementation Guide

OCTAVE – S and OTAVE Allegro

SummaryI

Risk managers 

Persons responsible for information security or conformity within an organization

Members of the information security team

IT consultants

Staff participating in the activities of risk assessment with the OCTAVE method

To understand the concepts, approaches, methods and techniques allowing an effective management of risk according to the OCTAVE method

To develop the necessary skills to conduct a risk assessment with the OCTAVE method

To master the steps to conduct a risk assessment with the OCTAVE method (including OCTAVE-S and OCTAVE Allegro)

To interpret the requirements of ISO 27001 on information security risk management

To understand the relationship between the information security risk management, the security controls and the compliance with the requirements of different stakeholders of an organization

To acquire the competence to implement, maintain and manage an ongoing information security risk management program

To acquire the competence to effectively advise organizations on the best practices in information security risk management

Day 1: Start of a risk assessment with OCTAVE

Day 2: Assessment of vulnerabilities and risk, according to OCTAVE

Day 3: The OCTAVE Method Implementation approach and conclusion

شهادة معتمدة من البورد البريطاني للتقييم المهني ( PECB( Professional Evaluation And Certification Board والمعتمد من معهد المعايير الوطنية الامريكية ANS