IT Risk Management & Information Security Controls Training
Master the art of managing IT risks with our specialized training program designed for IT professionals. Gain insights into identifying potential risks, implementing robust controls, conducting thorough assessments, and ensuring regulatory compliance. Enroll now to enhance your skills in safeguarding your organization's digital assets.
Public Pricing
Corporate Pricing
Pax:
Training Provider Pricing
Pax:
Features
Subsidies
What you'll learn
- Ensure compliance with regulatory frameworks like GDPR and SOX
- Master the use of COSO ERM framework for assessing inherent and control risks
- Understand various types of IT risks including cybersecurity threats and process vulnerabilities
- Gain proficiency in building an effective IT risk register
- Develop skills for performing quantitative vs. qualitative risk assessments
- Implement effective data protection policies and access controls
- Establish Key Risk Indicators (KRIs) for continuous monitoring
- Learn methodologies for identifying internal and external IT risks
Why should you attend?
In today's rapidly evolving digital landscape, IT departments face a myriad of risks that can significantly impact business operations and objectives. This course provides a comprehensive exploration of the various types of risks inherent in IT environments, including cybersecurity threats, human error, and process vulnerabilities. Participants will gain an understanding of how IT fits into enterprise risk management (ERM) and the roles and responsibilities of key stakeholders in managing these risks. The course delves into methodologies for identifying both internal and external IT risks, building an effective risk register, and assessing organizational risk appetite and tolerance. It also covers essential frameworks such as COSO ERM for assessing inherent and control risks, along with analyzing IT risk maturity models to gauge an organization's preparedness. Participants will learn practical approaches to conducting risk assessments using both quantitative and qualitative methods, understanding likelihood and impact, and performing Risk and Control Self-Assessments (RCSA). The course emphasizes continuous risk monitoring processes to ensure alignment with business goals. Effective communication is crucial in risk management. This course offers best practices for reporting risks to management and tools for effective risk communication. Additionally, it covers the design and implementation of IT-specific controls for risk mitigation, data protection policies, access controls, and monitoring physical vs. virtual control environments. Finally, the course addresses developing cost-effective risk mitigation strategies, documenting control processes, establishing Key Risk Indicators (KRIs), monitoring control performance, conducting internal vs. external audits, ensuring regulatory compliance with frameworks like GDPR and SOX, and learning from case studies on IT risk incidents.
Course Syllabus
Day 1 - IT Risk Fundamentals
Short Break
15 minsRecap and Q&A
15 minsLunch
1 hourShort Break
15 minsRecap and Q&A
15 minsEnd of Day 1
Day 2 - Risk Assessment Methods
Short Break
15 minsRecap and Q&A
15 minsLunch
1 hourShort Break
15 minsRecap and Q&A
15 minsEnd of Day 2
Ratings and Reviews
Instructor
Instructor
Dr. Esther Suria Kala is a highly accomplished ICT consultant and corporate trainer with nearly 30 years of extensive experience in information technology, project management, and organizational development. As the founder of Angel Software Solutions, she has established herself as a versatile and dedicated professional who delivers cutting-edge training solutions across Malaysia and internationally.
Her academic credentials are exceptional, including a PhD in Psychology with a focus on Human Behaviour and Human Resources, an MBA in Finance, and degrees in both Computer Science and Human Resources. Currently pursuing a second PhD in IT Information Security, Dr. Esther demonstrates an unwavering commitment to continuous learning and staying at the forefront of technological advancement. Her educational foundation is complemented by an impressive array of professional certifications, including Microsoft Certified Trainer (MCT), CISSP, ITIL, SAP Certified Associate, Certified Cyber Security Professional, Data Scientist, AI Engineering, and ECBA certifications.
Dr. Esther's technical expertise spans an extensive range of domains, from traditional programming languages like Java, C++, and PHP to modern technologies including Python, AI coding, machine learning, RPA, and IR 4.0 microservices. She is proficient in database management systems including Microsoft SQL Server and Oracle, web development frameworks, and enterprise solutions like SAP Crystal Reports and SharePoint Server. Her knowledge extends to cybersecurity, ethical hacking, network administration, and data analytics, making her uniquely qualified to address both technical and strategic business challenges.
As a trainer, Dr. Esther excels in bridging the gap between technical complexity and practical application. She delivers comprehensive training programs for both IT and non-IT professionals, covering everything from software development and cloud computing to soft skills such as digital marketing, business analysis, customer service, and project management. Her ability to communicate effectively in both English and Bahasa Malaysia enables her to connect with diverse audiences across different organizational levels.
Her impressive client portfolio includes leading organizations such as Maybank, Telekom Malaysia, Malaysian Airlines, Tenaga Nasional Berhad, Bank Negara, Ministry of Education, Ministry of Finance, and numerous multinational corporations. This extensive experience across banking, telecommunications, government, aviation, and technology sectors demonstrates her adaptability and deep understanding of varied industry requirements. Recognized with the Outstanding Achievement Award in Information Technology from University Malaya in 2013, Dr. Esther continues to empower organizations through innovative training solutions that drive digital transformation and professional excellence.
FAQ
Frequently Asked Questions About This Course
Why should you attend?
In today's rapidly evolving digital landscape, IT departments face a myriad of risks that can significantly impact business operations and objectives. This course provides a comprehensive exploration of the various types of risks inherent in IT environments, including cybersecurity threats, human error, and process vulnerabilities. Participants will gain an understanding of how IT fits into enterprise risk management (ERM) and the roles and responsibilities of key stakeholders in managing these risks. The course delves into methodologies for identifying both internal and external IT risks, building an effective risk register, and assessing organizational risk appetite and tolerance. It also covers essential frameworks such as COSO ERM for assessing inherent and control risks, along with analyzing IT risk maturity models to gauge an organization's preparedness. Participants will learn practical approaches to conducting risk assessments using both quantitative and qualitative methods, understanding likelihood and impact, and performing Risk and Control Self-Assessments (RCSA). The course emphasizes continuous risk monitoring processes to ensure alignment with business goals. Effective communication is crucial in risk management. This course offers best practices for reporting risks to management and tools for effective risk communication. Additionally, it covers the design and implementation of IT-specific controls for risk mitigation, data protection policies, access controls, and monitoring physical vs. virtual control environments. Finally, the course addresses developing cost-effective risk mitigation strategies, documenting control processes, establishing Key Risk Indicators (KRIs), monitoring control performance, conducting internal vs. external audits, ensuring regulatory compliance with frameworks like GDPR and SOX, and learning from case studies on IT risk incidents.
What you'll learn
- Ensure compliance with regulatory frameworks like GDPR and SOX
- Master the use of COSO ERM framework for assessing inherent and control risks
- Understand various types of IT risks including cybersecurity threats and process vulnerabilities
- Gain proficiency in building an effective IT risk register
- Develop skills for performing quantitative vs. qualitative risk assessments
- Implement effective data protection policies and access controls
- Establish Key Risk Indicators (KRIs) for continuous monitoring
- Learn methodologies for identifying internal and external IT risks
Course Syllabus
Day 1 - IT Risk Fundamentals
Short Break
15 minsRecap and Q&A
15 minsLunch
1 hourShort Break
15 minsRecap and Q&A
15 minsEnd of Day 1
Day 2 - Risk Assessment Methods
Short Break
15 minsRecap and Q&A
15 minsLunch
1 hourShort Break
15 minsRecap and Q&A
15 minsEnd of Day 2
Public Pricing
Corporate Pricing
Pax:
Training Provider Pricing
Pax:
Features
Subsidies
Ratings and Reviews
Instructors
Dr. Esther Suria Kala is a highly accomplished ICT consultant and corporate trainer with nearly 30 years of extensive experience in information technology, project management, and organizational development. As the founder of Angel Software Solutions, she has established herself as a versatile and dedicated professional who delivers cutting-edge training solutions across Malaysia and internationally.
Her academic credentials are exceptional, including a PhD in Psychology with a focus on Human Behaviour and Human Resources, an MBA in Finance, and degrees in both Computer Science and Human Resources. Currently pursuing a second PhD in IT Information Security, Dr. Esther demonstrates an unwavering commitment to continuous learning and staying at the forefront of technological advancement. Her educational foundation is complemented by an impressive array of professional certifications, including Microsoft Certified Trainer (MCT), CISSP, ITIL, SAP Certified Associate, Certified Cyber Security Professional, Data Scientist, AI Engineering, and ECBA certifications.
Dr. Esther's technical expertise spans an extensive range of domains, from traditional programming languages like Java, C++, and PHP to modern technologies including Python, AI coding, machine learning, RPA, and IR 4.0 microservices. She is proficient in database management systems including Microsoft SQL Server and Oracle, web development frameworks, and enterprise solutions like SAP Crystal Reports and SharePoint Server. Her knowledge extends to cybersecurity, ethical hacking, network administration, and data analytics, making her uniquely qualified to address both technical and strategic business challenges.
As a trainer, Dr. Esther excels in bridging the gap between technical complexity and practical application. She delivers comprehensive training programs for both IT and non-IT professionals, covering everything from software development and cloud computing to soft skills such as digital marketing, business analysis, customer service, and project management. Her ability to communicate effectively in both English and Bahasa Malaysia enables her to connect with diverse audiences across different organizational levels.
Her impressive client portfolio includes leading organizations such as Maybank, Telekom Malaysia, Malaysian Airlines, Tenaga Nasional Berhad, Bank Negara, Ministry of Education, Ministry of Finance, and numerous multinational corporations. This extensive experience across banking, telecommunications, government, aviation, and technology sectors demonstrates her adaptability and deep understanding of varied industry requirements. Recognized with the Outstanding Achievement Award in Information Technology from University Malaya in 2013, Dr. Esther continues to empower organizations through innovative training solutions that drive digital transformation and professional excellence.
FAQ
Frequently Asked Questions About This Course
Our Offers
Academy for Trainers Academy for Trainers
Teach what you love. Abundent Academy gives you the tools you need to run your own trainings! We provide you with the platform, the students, the materials, and the support you need to succeed!
- Higher trainer payouts
- Ready-made course materials
- Student management system
- AI digital marketing assistant
Academy for Corporates Academy for Corporates
Get unlimited access to all of Abundent Academy's carefully curated courses for your team, all organized according to learning paths and roles! Perfect for companies looking to upskill their workforce and stay ahead in the tech industry.
- Carefully curated courses
- Role-based learning paths
- Team progress tracking
- Gap Identification and Analysis
Academy for Partners Academy for Partners
White-label IT training delivery for training providers. We become your behind-the-scenes delivery arm so you can say yes to more clients without hiring more trainers.
- Expand your training catalog
- 40+ expert trainers ready
- White-label delivery
- You keep client relationships
Top companies choose Abundent Academy
