Skill Level Beginner
- Welcome to this course on risk management. In this course, we're going to cover a lot of material. We're going to start by answering a fundamental question, what is risk? Well, risk in its most basic form is any situation that involves exposing something of value to danger. We're going to focus a lot on this concept throughout this course. Now, we're going to begin by talking about the different types of risk that you're going to face in cyber security and IT management, as well as discussing how to deal with that risk. After all, there are only four basic things that you can do with risk. You can avoid risk, you can mitigate risk, you can transfer risk and you can accept risk. We're going to dive into each one of those and provide examples for each of them so you'll understand what you're working with when you're dealing with risk and risk management decisions. We're also going to discuss how you can calculate risk using both qualitative and quantitative methods. I'm going to show you how to perform some calculations so you can figure out exactly what is the risk that you're going to be assuming when you're making those risk management decisions. I'm also going to show you how to translate that quantity of risk into actual dollars and cents in order to make the right fiscal decisions. We're also going to cover what happens when risk management fails. In order to keep things focused on the real world and not just looking at things from a textbook definition and theory perspective, I'm going to present you with a few real world case studies that will show you what some failures that happened in the real world look like. This is things like the major Amazon web services outage of 2017 and the Equifax breach. Now, we're going to look at what caused them and how they could have been prevented using proper risk management. At the end of the day, everything we do is a decision. There are risks out there, there are threats out there, there are vulnerabilities out there. Our job as managers and executives is to figure out how we can best balance these things to make the proper risk decisions inside our organizations but then we have to live with the consequences of those decisions. If you're currently a manager or an executive or you're hoping to be one in the future, then it's important for you to realize that you're going to be the one making these risk decisions. You can choose to accept the risk, mitigate a risk, transfer a risk or avoid a risk. There are reasons to choose each of these options at different times and in different situations and unfortunately, I won't be able to give you definitive guidance for every situation you may face. Instead though, I'm going to teach you how you can analyze a situation to make the best decisions possible because when you make that decision, you're going to have to live with those consequences and then the repercussions of them. So now that I've gotten you all excited about risk and risk management hopefully, we need to take a small detour so I can introduce you to myself and share a few important tips to help you learn better during our time together. My name is Jason Dion and I'm a college professor and the lead instructor at Dion Training Solutions. I've been working in the IT and cyber security field for over two decades for organizations that are large and small. During that time, I've led numerous projects as a project manager, run network operations center and dealt with risk on a global scale. Now, I've worked in organizations with just a handful of people like my own company these days, but I've also manage risk across dozens of countries and nearly a million endpoint devices in some of my larger organizations. Now, I'm not just an instructor but I'm also a practitioner in this world of risk management and I've been doing it for many years. Rest assured, you are in good hands as we begin to dive into these concepts of risk management and I start to show you how managers and executives look at risk within their organizations. Now, here are my four tips to success in this course. First, for every video in this course, you have the ability to turn on closed captions. Each video is captioned by a real human being and they do this for accuracy and this will allow you to read along with the course if you need to. Many of my students who speak English as a second language love having the captions playing along with the videos because it helps aid in their learning. If you want to enable closed captions, simply click on the CC button in the bottom of the video player. My second tip is about playback speed. Some of my students say that I talk too fast, others say I talk too slow. Either way, you get to control the speed of instruction by clicking on that 1x button in the bottom of the video player. If you want me to teach faster, select 1.25x or 1.5x. If you want me to teach slower, simply click .75x or .5x, faster or slower, the choice is yours. Third, and probably one of the most important tips in this course is that it comes with a downloadable study guide as a PDF. I recommend that you download it, you print it out and you use it to take notes on as well. My fourth and final tip is about our student support group. We have a student support group with several thousand other students who are learning risk management, project management and other IT certifications through our courses. If you want to join the fun, come over to facebook.com/groups/diontraining and request to join this private group. In this group, we're going to answer your questions, we put out additional free content and help support each other throughout our careers. Also, if you ask a question there, you'll likely get an answer within just a few minutes most of the time because there are thousands of other students, both past and present, who join in those conversations. So if you're on Facebook, I highly recommend joining the group today. Now, if you aren't on Facebook, you can still ask questions if you get stuck during the course, simply post a question in the Q&A section and we'll get to it. Either myself or one of my team members will answer your question that's posted there usually within one or two days in most cases. Like I said, our Facebook group does tend to get questions answered much quicker because there are so many more people online and available anytime of the day or night. Now, with all of these introductions behind us, let's get started learning all about risk management so you can make the best decisions possible.