Cybersecurity and ITCyber Security Risk Assessment and Management
Security spending goes wrong when it follows the loudest threat rather than the organisation's actual exposure. This course builds the assessment that directs it. Delegates work through asset and data identification, threat modelling against a realistic adversary rather than a theoretical one, and vulnerability assessment across systems, people and suppliers. Risk is then expressed in terms an executive can act on: likelihood, business impact and the cost of the control against the cost of the event. Treatment selection, residual risk acceptance and the risk register follow. The course closes on reassessment, because an assessment done once describes an environment that no longer exists.
Course objectives
- Identify the assets and data that actually matter to the organisation
- Model threats against a realistic adversary and capability
- Assess vulnerability across systems, people and third parties
- Express risk in likelihood and business impact rather than technical severity
- Compare the cost of a control against the cost of the event
- Select treatment and obtain informed acceptance of residual risk
- Keep the assessment current as the environment changes
Who should attend
- Information security managers and analysts
- IT and technology risk professionals
- Internal auditors covering technology
- Risk and compliance staff
- IT managers without a dedicated security function
Course outline
- 01Why security spending follows the wrong signals
- 02Asset and data identification
- 03Threat modelling against a realistic adversary
- 04Vulnerability across systems, people and suppliers
- 05Likelihood and business impact
- 06Control cost against event cost
- 07Treatment, residual risk and the register
- 08Reassessment and keeping it current
Scheduled sessions
| Dates | Venue | Format | Price | Register |
|---|---|---|---|---|
| 21 to 25 September 2026 | Lusaka, Zambia | Classroom | USD 1,325 per delegate | Register Now |
| 9 to 13 November 2026 | Nairobi, Kenya | Classroom | USD 1,325 per delegate | Register Now |
| 4 to 8 January 2027 | Cape Town, South Africa | Classroom | R19,950 per delegate | Register Now |
| 8 to 12 February 2027 | Online | Online | R8,500 per delegate | Register Now |
| 15 to 19 March 2027 | Accra, Ghana | Classroom | USD 1,325 per delegate | Register Now |