KR eCampusCourses coming soon

KR ECAMPUS

Choose your country

Select your country to switch to the right eCampus site.

My eCampus

Back to courses

Advanced · Self-paced learning

Enterprise Security Risk Management

Inquiry This course is not yet bookable.

A business unit wants to launch a new service despite a known failure dependency and assigns the risk to security. The security function controls neither service scope nor budget. Establish who owns the business risk and what protection security can provide, then develop a service catalogue for work with business leaders.

Compare a delayed launch, conditional launch and risk acceptance against business consequences, resources and authority. If the budget for a measure disappears, revise the assignment. For your own area or the case, develop a security service catalogue and a table recording risk owners, resources and checks on protective effect.

The result supports work with business leaders. Risk acceptance and budget decisions remain with the authorised organisational role.

What you will work on

  • Connect business objectives, protected assets and risk owners for a defined area
  • Derive security services and priorities from specific risks and make resource assumptions explicit
  • Work through a security assignment with a conflicting business priority

Who it is for

  • Security leaders
  • Enterprise risk managers
  • Business area leaders with protection responsibilities

Topics

  • Business objectives and protected assets
  • Risk ownership and the security advisory role
  • Security strategy and service portfolio
  • Priorities and resources
  • Performance evidence, limits of inference and management review

Your result

Your security service catalogue and management table connect business risks with assignments, resources and questions about protective effect. Use them in ongoing work with business units.

Prerequisites

Experience in enterprise security or risk management and knowledge of a business area. Work on your own organisation requires access to the relevant business information; otherwise, use a case study.

Format and approach

Planned as eight to ten hours of self-study, with strategy drafting and a self-check.

Planned learning time: 8–10 hours

Enquire about this course

Advanced · Self-paced learning

ISMS Foundations for Managers

Plan the start of an information security management system (ISMS) for a defined area. Establish its scope, protection objectives and roles, and record initial risks and actions. You can take the resulting concept forward with the people responsible in your organisation.

Read the description

Advanced · Self-paced learning

Managing an Information Security Programme

Plan the annual information security programme for your area: which objectives and risks come first, and what actions and resources are needed? A management review template helps you present the decisions and supporting evidence to leadership.

Read the description

Advanced · Self-paced learning

Managing Executive Protection Services

A delegation trip requires continuous local protection and a contact who is available at all times. One provider offers references and extra technology but cannot commit to local support. Assess proposals against mandatory services first.

Read the description