Posted by Roshan Abraham in
Effective Privacy Risk Management is an organization’s ability to proactively manage both risks and opportunities towards achieving a desired/optimal state. To identify privacy risks, one must be able to systematically assess the threats and vulnerabilities that can jeopardize the privacy of Personal Information (PI).
This course presents a practical Threat and Risk Assessment (TRA) methodology applicable to any privacy or security situation, with examples and exercises relevant to people, processes, and technological environments.
Course Outline
* Understand the TRA requirement
* Set the scope of the assessment
* Identify assets containing PI
* Assess potential threats
* Examine existing and proposed safeguards
* Determine remaining vulnerabilities
* Calculate residual risk
* Recommend an appropriate response
* Determine risk treatment plan
2 Days Course
October 1 - 2nd, 2009
