AcademyCourses›ITSRM² Foundation
ITSRM² Foundation
The fundamentals of IT security risk management using the ITSRM² method: risk analysis, assessment and treatment.
Overview
ITSRM² is the methodology the European Commission uses to manage the security risks of its information systems. This course gives you a clear, practical understanding of it: key concepts, the risk formula, the seven processes of a risk study (P1 to P7), and the reference scales and catalogues. It also shows how to adapt the method to any organisation, public or private, and ends with a complete case study, from kick-off to closure.
Objectives
- Understand why and how to manage IT security risks with ITSRM²
- Master the key concepts and the risk formula: likelihood, impact, residual risk
- Chain the 7 processes of the risk study, from system characterisation to risk treatment
- Use the scales and catalogues: 67 threats, 241 security measures
- Adapt ITSRM² to your organisation, inside or outside the European institutions
Target audience
IT security officers (LISO, CISO), system and data owners, IT teams, security, risk and compliance consultants, and anyone who takes part in an IT security risk study.
Prerequisites
No prior knowledge of ITSRM² is needed. A basic understanding of IT security is an advantage.
Programme
- Part 1 · Fundamentals: context, key concepts, overview of the process
- Part 2 · The 7 processes: one module per process, from P1 to P7, plus acceptance and follow-up
- Part 3 · Scales and catalogues: the common references of a risk study
- Part 4 · Wrap-up: the GRANTIS running case and the final quiz
- Part 5 · Beyond the Commission: adapting the method and the complete NordLink case study
Format and duration
17 short modules, about 9 hours in total, online and at your own pace. The course is taught in English. A quiz closes each module; a final 20-question quiz (pass mark: 70%) earns you an ITSMS Academy certificate of achievement.