COURSE SUMMARY 

 

This course is outside the scope of the CU/IRRG security certification but is recognized as one of the courses for the Security Training and Education Certificate (STEP) program offered by Savoie Security Associates. 

​

Building on knowledge gained in the Assets Protection and Physical Security course, this two-day security risk management (SRM) course provides participants with greater depth and understanding of the threat landscape and how to identify and address organizational vulnerabilities. Participants are shown how to assess security risks using a structured approach.

​

The course covers essential elements of the risk management process by using a case study to apply the principles learned in a practical and realistic way. Throughout the course, participants are provided with tools and knowledge to identify what an organization needs to protect, where they can find information on the threat landscape, and how to use a structured assessment approach to highlight key risks.

​

The final stage of the training provides students with information on assessing residual risks with a practical in-class session on the development of a risk report, what it should include, and how to present the information to the decision-makers.

​

There are 2 Modules:

​

Module l: Risk Evaluation   

​

The process used to evaluate risks will provide students firstly with an understanding of how to identify and assess potential sources of harm, including but not limited to cyber attacks, natural disasters, human error, ineffective physical and information security measures, processes, and procedures.

​

Secondly, the students will be instructed on where to find and assess information on plausible threats (within the organization and externally), and how to rank them in order of priority. Using a structured risk management methodology students will learn how to identify, evaluate, and prioritize elements for strategic planning and integration with the departmental security plan.

 

Security risk management is a continuous process that requires management support, a proactive and adaptive approach to ensure the ongoing protection of people, information, and assets.

​

Module 2: Evaluation Report

​

This module instructs on the preparation of a risk assessment report, and how to frame risk findings in a convincing way so that management can make informed decisions. Students will learn how to compartmentalize and integrate security risk management process into the departmental security plan. The evaluation report will explain the risk assessment process and findings, indicate how resilience can be strengthened to protect people from harm and information and assets from compromise.

​

Participants are provided with examples that they can adapt and use in their department.

​

At the end of the course, participants will be able to: 

​

• Describe essential security risk management concepts

• Evaluate and prioritize risks for action

• Prepare a security risk assessment report

• Understand how the organization’s unique culture is fundamental in risk management

• Discover where to find information on the threats that matter to their organization  

• Provide subject matter expertise regarding security risk management concepts

​

Who should attend:

​

Security practitioners who want to understand and use security risk management tools that help to provide structure and clarity to security decision making.

​

Security project officers involved in the planning process and those who wish to learn more about the assessment of security risks.

​

Project managers who are responsible for projects that have significant security considerations and potential risks areas and must prepare reports to management for decision making.

​

Generalists who want to expand their overall security skills and increase their career advancement opportunities.

​

This course is a must have for employees involved with security program delivery and who are interested in advancing their career or competing for security positions.

​

​