-: In this section of the course 2 2
we're going to cover risk mitigation 3 3
by focusing on Domain 2, Vulnerability Management 4 4
and Domain 4, Reporting and Communication, 5 5
and specifically covering objectives 2.5 and 4.1. 6 6
Objective 2.5 states, 7 7
that you must be able to explain the concepts 8 8
related to vulnerability response, handling, and management. 9 9
And objective 4.1 states, 10 10
that you must be able to explain the importance 11 11
of vulnerability management reporting, and communication. 12 12
Now, as we move through this section of the course, 13 13
we're going to start out 14 14
by outlining the risk identification process 15 15
that's used in enterprise risk management. 16 16
Then we're going to be talking about an assessment 17 17
and how we can conduct one using inventory systems 18 18
as well as different software tools that we have 19 19
and in order to be able to conduct a threat 20 20
and vulnerability assessment. 21 21
Next, we're going to cover how risk is calculated 22 22
both qualititatively and qualititatively. 23 23
Then we're going to move into how we can conduct 24 24
business impact analysis 25 25
and perform risk prioritization inside of our enterprises. 26 26
This is really important 27 27
because we never have enough time or money 28 28
to mitigate every single risk 29 29
within our given systems or networks, 30 30
but by prioritizing them, 31 31
we can get the most bang for our buck 32 32
during our risk mitigation efforts. 33 33
Next, we're going to be covering 34 34
how you can communicate the risk we identified 35 35
to our key decision makers within our organizations. 36 36
And after that, we're going to discuss training and exercises, 37 37
things like tabletop exercises, penetration tests, 38 38
and red team and blue team activities and exercises 39 39
that help us mitigate organizational risks 40 40
that could exist within our companies. 41 41
Finally, we're going to take a short quiz 42 42
to see what you learned during this section of the course 43 43
and review each of those quiz questions fully 44 44
to ensure you can explain why 45 45
the correct answers were right. 46 46
So, let's get started talking all about risk mitigations 47 47
in this section of the course.