From the course: ISACA Certified Information Security Manager (CISM) Cert Prep

Unlock this course with a free trial

Join today to access over 26,100 courses taught by industry experts.

Risk scenarios

Risk scenarios

From the course: ISACA Certified Information Security Manager (CISM) Cert Prep

Start my 1-month free trial Buy for my team

Risk scenarios

“

- [Instructor] And then the next thing that we could do is we could look at risk scenarios. And risk scenarios are play in the what if game. So when we're sitting around in our risk meeting and we have our risk management team together, you know, we can go through some of these experiences perhaps we've had, we can put ourselves in the position of an attacker, we can focus on vulnerabilities or we can focus on threats, or we can focus on assets. But ultimately, if we have a methodical way to sort of brainstorm to work together so that we can come up with risks and understand them a little bit better, that's obviously going to suit our interests very well. Now, in an IT risk scenario, you have five elements that you need. You need to identify who your threat actors would be, their threat type, event, what's affected by the risk, and any sort of elements to timing and we'll talk about that. Okay. So here we have the elements of a risk scenario. And so over on the left at the bottom, we…

Contents