QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Building asset context into Kestrel Northern Bank's risk register: a shared file-transfer server, sft-shr-02, recorded as tier 4 with no relationships and its only risk R-0884 rated Low, turned out to feed payments, payroll, finance close and the data platform, and its failure held settlement for 11 hours against a 4-hour tolerance and cost £4.2M; with context the risk re-rates from 6 Low to 20 High. Context coverage across 1,400 risks rises from 18% to 78% against a 75% target, and the investment case compares expected annual loss of £6.1M today with options A, B and C, recommending option B for the Board on 19 May 2027.
CY-PRO-053Pro Level · Risk Assessment

Asset Context and Criticality Mapping

A forty-hour Pro-level risk-assessment governance simulation run on a live asset context investment board, where you are Head of Technology Risk at a UK bank whose Low-rated file-transfer server has just stopped 212,000 payments — a register that rated 1,400 risks but knew the assets and services behind only 18% of them — and you define the context standard, map services from the customer down, ground ratings in criticality, data and dependencies, move ratings in both directions, keep context current, choose tooling on evidence, price the programme at the margin and win a Board resolution everyone can be held to.

40 hours12 chapters60 lessons433 activities12 labs

What you'll learn

  • Define an asset context standard, measure a register against it with a fixed denominator, and quantify what the context gap has cost without overclaiming causation.
  • Ground risk ratings in business-service maps, criticality tiers derived from impact tolerances, data classification from its system of record and dependencies including chokepoints, moving ratings in both directions through a calibrated panel.
  • Keep context current with an operating model hung on change, discovery and ownership events, and choose tooling from requirements, total cost, lineage and proofs of value on the organisation's own evidence.
  • Price a risk-assessment programme at the margin with expected loss built from the organisation's own history and scenarios, name its residuals and indicators, and win a board resolution it can be held to.

Price:৳15,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.