Running cyber risk as a decision discipline at Meridian, a mid-size financial services firm: the eight-stage risk loop — context, identify, analyze, evaluate, treat, monitor, report and improve — turning around a stated appetite of no more than $50,000 per incident; a false-precision estimate of $127,340 replaced by an honest range of $80,000 to $220,000; and treatment decided on cost against expected loss — a $250,000 control for a $40,000 loss rejected, while a $15,000 control for a $180,000 loss and a $5,000 process fix for a $12,000 loss go ahead — reported on a heat map with a plain narrative.

CY-MID-051Mid Level · Cyber Risk Management

Cyber Risk Management — The Risk Loop

A hands-on mid-level course that runs cyber risk as a disciplined, repeatable cycle. Work the risk loop - eight stages: Context, Identify, Analyze, Evaluate, Treat, Monitor, Report, and Improve - building a risk register, scoring consistently, and driving real treatment decisions. Grounded in NIST RMF and ISO 27005; decision-driven. Four hands-on activities in every lesson.

14 hours8 chapters32 lessons220 activities8 labs

What you'll learn

Set risk context and build a real, prioritised risk register.
Analyse and evaluate risk consistently (qualitative and quantitative).
Choose and track proportionate risk treatments.
Monitor, report to leadership, and improve the risk program.

Price:৳8,000