IT risk management

Course objectives:

— To form a holistic view of project and operational risk management in general and IT risks in particular.

— To teach participants to practically organise (or improve) the risk management process in the IT unit (IT company), including both operational risk management (the «Security Management», «Continuity Management» and «Availability Management» processes) and project risks.

— To increase the effectiveness of work on implementing (or improving) the risk management system at the customer's enterprise.

The «IT Risk Management» training, lasting 2 days (16 academic hours), examines the organisation of an effective risk management system, including the risk management model and related standards. As a result of the training, participants gain the necessary knowledge and practical skills to effectively organise proactive risk management in the company.

The training includes:

1. Theoretical material (models, description of the risk management process and the standards related to this activity).
2. Practical work on compiling a list of risks and plans for managing them (i.e. a risk register) based on practical cases.
3. Electronic materials: methodologies, standards, ready-made process templates and risk management forms for further use.

Target audience:

— IT managers and key staff responsible for planning and organising infrastructure management and (or) managing the delivery of IT services,

— project managers,

— IT staff involved in risk management at the enterprise (security managers, service continuity and availability managers, etc.),

— consultants and other specialists involved in planning and implementing the risk management system or processes in which risk management models apply.

Prerequisites.

For effective learning on this course it is strongly recommended to complete the courses «ITIL v.3 Foundation» and «Project Management» (for example, based on PMBoK) beforehand, or to have knowledge equivalent to these courses. Work experience in a technical support service and (or) managing such a service is also required.