Risk management and information security incidents

• Osnovni pojmovi
• Resursi
• Prijetnje
• Ranjivosti
• Rizik
• Koncepti i definicije koje se odnose na upravljanje rizicima
• Norme, standardi i metodologije u upravljanju rizicima
• Prepoznavanje prijetnji i ranjivosti
• Karakterizacija sustava
• Analiza kontrola
• Određivanje vjerojatnosti
• Analiza utjecaja
• Određivanje i ublažavanje rizika
• Strategija za smanjenje rizika
• Rukovanje s rizicima
• Prepoznavanje rizika i procjena prema ISO 27005 normi
• Zakonska regulativa RH HANFA Smjernice za primjereno upravljanje rizicima informacijskih sustava
• Sustav upravljanje informacijskom sigurnošću (ISMS)

1. Organize implementation, maintenance and management of information security risk management program
2. Present best practices in information security risks management
3. Analyze concepts, approaches, standards, methods and techniques for effective risk management
4. Analyze the relationship between information security system, security controls and legal / regulatory provisions related to risk management
5. Apply the risk assessment and risk management process within the organization
6. Identify concepts, approaches, methods and techniques that enable effective risk management
7. Identify and asses risk

Required reading

• Atle Refsdal, Bjrnar Solhaug, Ketil Stlen, Cyber-Risk Management,Springer, 978-3-319-23569-1, 2015
  CERT, Upravljanje sigurnosnim incidentima, CARNet CERT, 2009
  Steve Elky, An Introduction to Information System Risk Management ? SANS 2007