0b: Understanding an Organization's Risk Environment

Watch the Lecture videos in order:

1. Part 1  Business Context
2. Part 2  Key Concepts – CIA, Threats-Adversarial
3. Part 3  Key Concepts – Threats-Accidental, Structural, Environmental
4. Part 4  Key Concepts – Vulnerabilities and Risk
5. Part 5  Key Concepts – Risk Assessment, Quantitative Risk Assessment
6. Part 6  Key Concepts – Risk Management, Mitigation Controls; ISACA RiskIT Framework
7. Part 7 – Critical Infrastructure and Risk
8. Part 8 – Risk Management Standards and Frameworks
9. Part 9 – Risk Management Frameworks (continued), Next Time…

Do ITACS students represent information security vulnerabilities to the school, each other, or both?
Explain the nature of the vulnerabilities ITACS students represent in the context(s) you chose?

Is information security a technical problem, a business problem that the entire organization must frame and solve, or both?  Explain the nature of the problem in the context(s) you chose.

Provide an example of a measurement used in quantitative information security risk analysis.
What challenges are involved in calculating such a measurement?