ISO 27005 Risk Manager with OCTAVE

Introduction, risk management program according to ISO 27005Concepts and definitions related to risk managementRisk management standards, frameworks and methodologiesImplementation of an information security risk management programUnderstanding an organization and its contextRisk identification and assessment, risk evaluation, treatment, acceptance, communication and surveillance according to ISO 27005Risk identificationRisk analysis and risk evaluationRisk assessment with a quantitative methodRisk treatmentRisk acceptance and residual risk managementInformation Security Risk Communication and ConsultationRisk monitoring and reviewCertified ISO 27005Risk Manager Exam (2 hours)Start of a risk assessment with OCTAVEPresentation of OCTAVEPhase 1 - Process 1 to 3 (Understanding the Organization)Phase 1 - Process 4 (Create threat profiles)Phase 2 - Process 5 (Identification of key components)Assessment of vulnerabilities and risk, according to OCTAVEPhase 2 - Process 5 (Continued)Phase 2 - Process 6 (Evaluation of selected components)Phase 3 - Process 7 (Conducting the risk assessment)Phase 3 - Process 8 (Development of a Protection Strategy)The OCTAVE Method Implementation approach and conclusionPhase 3 – Process 8 (Development of a Protection Strategy – cont.)The OCTAVE Method Implementation GuideOCTAVE – SOCTAVE AllegroSummary