This is session 2 of 2 in the Cyber Policy and Risk Management Best Practices and Strategies virtual course.

Policy and risk management is an important component to any organizations’ operations. Documenting issues and developing plans of action are important to managing your risk. 

This virtual course will focus on best practices and challenges in creating a policy to manage risk. We will cover general policy guidelines, documentation and communication of a cyber policy, and which stakeholders within the organization are responsible for developing a cyber policy. You cannot enforce a policy unless you also understand the risks your organization might face. We will discuss how best to manage risk and communicate what's at risk throughout your organization.

During the second half of the day, we'll walk through a couple recent scenarios in which a cyberattack happened. You will determine what action should have been taken and whether or not the existing policies worked to mitigate the damage caused. You'll answer questions concerning whether there was a sound communication plan in place, whether authorities were notified in a timely matter, what consequences were faced, and did/will they recover. 

Who Will Benefit?
This program is tailored for everyone: prime contractors; subcontactors; small businesses; government agencies, non-profits, etc. You will walk away with some valuable knowledge and some new skills to bring back to your organization to ensure you can implement a solid risk management policy.

Learning Objectives:
Upon successful completion of this course you will:

• Gain an understanding of the enterprise risk management framework
• Put in place best practices of an COSO ERM
• Identify risks and stakeholders of an ERM
• Assess and define risk within the current environment
• Know the types of cyber attacks and how they impact systems

 NOTE: On-Demand Virtual Course sessions are not eligible for CLE/CPE credits.