M1807

Ladda ner som PDF

RESILIA™ Foundation

The RESILIA TM Foundation course starts with the purpose, key terms, the distinction between resilience and security, and the benefits of implementing cyber resilience. It introduces risk management and the key activities needed to address risks and opportunities.

Further, it explains the relevance of common management standards and best practice frameworks to achieve cyber resilience. Subsequently, it identifies the cyber resilience processes, the associated control objectives, interactions and activities that should be aligned with corresponding ITSM activities. In the final part of the course, it describes the segregation of duties and dual controls related to cyber resilience roles and responsibilities.

Audience

The qualification is aimed at professionals with responsibility for IT and security functions or risk and compliance operations within an organization.

Prior knowledge

No prerequisites required.

Certification

Student must pass a 100 minute, 50 question closed book multiple choice, examination with a passing score of 65% in order to receive this certification.

You’ll learn

On successful completion of the course delegates will be able to understand:

  • The purpose, benefits, and key terms of cyber resilience.
  • Risk management and the key activities needed to address risks and opportunities.
  • The purpose of a management system and how best practices and standards can contribute.
  • Cyber resilience strategy, the associated control objectives, and their interactions with ITSM activities.
  • Cyber resilience design, the associated control objectives and their interactions with ITSM activities.
  • Cyber resilience transition, the associated control objectives, and their interactions with ITSM activities.
  • Cyber resilience operation, the associated control objectives, and their interactions with ITSM activities.
  • Cyber resilience continual improvement, the associated control objectives, and their interactions with ITSM activities.
  • The purpose and benefits of segregation of duties and dual controls.

Course content

Module 1: Intro to Cyber Resilience

  • Describe what cyber resilience is
  • Identify the benefits of cyber resilience
  • Identify the terms
  • Identify the purpose of balancing
  • Identify the need for:
    • Confidentiality
    • Integrity
    • Availability
    • Authentication
    • Nonrepudiation

Module 2: Risk management

  • Describe what risk management is
  • Identify the purpose of risk management
  • Identify the terms: risk, asset,... Läs mer

You’ll learn

On successful completion of the course delegates will be able to understand:

  • The purpose, benefits, and key terms of cyber resilience.
  • Risk management and the key activities needed to address risks and opportunities.
  • The purpose of a management system and how best practices and standards can contribute.
  • Cyber resilience strategy, the associated control objectives, and their interactions with ITSM activities.
  • Cyber resilience design, the associated control objectives and their interactions with ITSM activities.
  • Cyber resilience transition, the associated control objectives, and their interactions with ITSM activities.
  • Cyber resilience operation, the associated control objectives, and their interactions with ITSM activities.
  • Cyber resilience continual improvement, the associated control objectives, and their interactions with ITSM activities.
  • The purpose and benefits of segregation of duties and dual controls.

Course content

Module 1: Intro to Cyber Resilience

  • Describe what cyber resilience is
  • Identify the benefits of cyber resilience
  • Identify the terms
  • Identify the purpose of balancing
  • Identify the need for:
    • Confidentiality
    • Integrity
    • Availability
    • Authentication
    • Nonrepudiation

Module 2: Risk management

  • Describe what risk management is
  • Identify the purpose of risk management
  • Identify the terms: risk, asset, vulnerability, threat
  • Describe actions to address risks and opportunities:
    • Establish context
    • Establish criteria for risk assessment and acceptance
    • Risk identification
    • Risk analysis and evaluation
    • Risk treatment
    • Risk monitoring and review
  • Identify the terms:
    • Risk register
    • Risk avoidance
    • Risk modification
    • Risk sharing
    • Risk retention
    • Risk treatment plan
    • Defence-in-depth

Module 3: Managing Cyber Resilience

  • Identify the purpose and scope of a management system
  • Identify the components of a management system
  • Recognize the relevance of common management standards and best practice frameworks to cyber resilience
  • Describe the difference between management, governance, and compliance

Module 4: Cyber Resilience Strategy

  • Identify what cyber resilience strategy is intended to achieve
  • Identify cyber resilience activities that should be aligned with IT service strategy
  • Describe the purpose and key features of the control objectives
  • Identify interactions between the following ITSM processes and cyber resilience

Module 5: Cyber Resilience Design

  • Identify what cyber resilience design is intended to achieve
  • Identify cyber resilience activities that should be aligned with IT service design
  • Describe the purpose and key features of the control objectives
  • Identify interactions between the following ITSM processes and cyber resilience

Module 6: Cyber Resilience Transition

  • Identify what cyber resilience transition is intended to achieve
  • Describe the purpose and key features of the control objectives
  • Identify interactions between the following ITSM processes and cyber resilience

Module 7: Cyber Resilience Operation

  • Identify what cyber resilience operation is intended to achieve
  • Describe the purpose and key features of the control objectives
  • Identify interactions between the following ITSM processes and cyber resilience

Module 8: Cyber Resilience Continual Improvement

  • Identify what cyber resilience continual improvement is intended to achieve
  • Recognise maturity models and their purpose
  • Describe the purpose and key features of the control objectives
  • Describe how the seven-step improvement process can be used to plan cyber resilience improvements
  • Describe how to use ITIL CSI approach to plan cyber resilience improvements

Module 9: Cyber Resilience Roles & responsibilities

  • Describe segregation of duties and dual controls

Kursfakta

Kurs-ID: M1807
Längd: 3 dag
Pris exkl moms: 21 950 kr
Inregistrering: 09.00
Kursstart: 09.30
Kursslut (ca): 17.00

Frågor om kursen?

Har du frågor om kursens innehåll, leveransdatum/ort eller behöver en företagsanpassad variant? Fyll i formuläret nedan!


Kan betalas med:
TRAINING CARD

Ort och datum

Stockholm
3 dec-5 dec
Boka nu!
Göteborg
3 dec-5 dec
Boka nu!

Tipsa