This three-day workshop (contents given below) aims at providing a generic, hands- on approach to learning risk management concepts and practices. The program makes references to ISO31000 though the contents spread well beyond the realm of ISO31000. The program is relevant to those involved in managing risks; particularly in the context of requirements contained in ISMS (ISO27001:2017), BCMS (ISO22301:2019), SMS (ISO20000-1:2018) and PIMS (ISO27701:2019)
Instructor facilitated presentations will be part of the methodology and emphasis will be laid on discussing case studies and participating in hands-on exercises throughout the program. The program will discuss a number of risk genres. Participants will discuss published case studies that have broader implications extending beyond business and enterprise level risk scenarios with emphasis on technology and related areas.
The program will draw on the long years of risk and control management expertise of the facilitator who had worked in or provided consulting services to enterprises in the area of risk management in different verticals – manufacturing, trading conglomerates, media, power electronics, precious metal jewellery, mining, textiles, and service areas like law enforcement, transportation and logistics as well as BFSI.
This is a highly interactive workshop where the attendees will actively participate in:
- Case discussions, individually and in groups in the sessions dedicated to case studies.
- In facilitator led sessions where mini cases will be interspersed between the presentations.
The end-of-session assessment will comprise of two components – the responses to the different case studies that will be done during the program and a brief formal assessment of 20 MCQs and one case study at the end of the program.
Day – 1
Participant’s intro and course methodology
- Conceptualization of Risk.
- Threat, Vulnerabilities and Exploit path.
- Controls – adequacy and relevance.
- Risk Appetite.
- ISO31000.
- Overall structure of the Standard.
- Key definitions.
- Approaches to managing risk.
- ISO31000.
- Overall structure of the Standard.
- Key definitions.
- Approaches to managing risk.
- Risk Analysis and Management.
- Risk Management Ontology.
- Proactive response to changing risk context.
- Risk Identification.
- Frequency of occurrence and.
- impact of risky events.
Day – 2
- Understanding an organization from Risk Management perspective.
- Planning and budgeting for risk management.
- Risk Management Frameworks.
- Risk Criteria & Risk Appetite.
- Risk identification, analysis, evaluation & treatment.
- Monitoring, reviewing, recording and reporting.
- Risk Management – Plan, Implement, Measure and Learn.
- Case study discussion.
- Risk treatment in Management standards.
- ISMS – ISO27001.
- BCMS – ISO22301.
- PIMS – ISO27701.
- SMS – ISO20000.
Day – 3
- Creating a comprehensive risk management policy and procedure.
- Case study discussion.
- Hands-on exercise: completing a risk register.
- Assessment using MCQs and case study.
