Explain Risk Management Processes

---

Goals

• Explain risk management processes and concepts
• Explain business impact analysis concepts
• Understand various risk responses
• Learn about vendor assessments and management practices
• Explore internal and external assessment concepts
• Learn about different penetration testing methods

Risk Management Processes and Concepts

• Risk Assessment
  • Risk Identification
  • Quantitative Risk Analysis
  • Qualitative Risk Analysis
  • Risk Heat Map
• Risk Management Strategies
• Risk Management Process
  • Enterprise Risk Management (ERM)
  • Risk Level
  • Risk Registers
  • Risk Threshold
  • Key Risk Indicator (KRI)
  • Risk Appetite
  • Risk Reporting
• Business Impact Analysis (BIA)

Vendor Management Concepts

• Vendor Management
• Vendor Selection
• Vendor Assessment Methods
• Vendor Legal Agreements

Audits and Assessments

• Attestation and Assessments
• Penetration Testing
• Active and Passive Reconnaissance
• [[Classifying Penetration Tests#Classifying Penetration Tests#Black Box, White Box, and Gray Box|Black Box, White Box, and Gray Box Testing]]
• Penetration Exercise Types