Course 02

This domain will corroborate student’s understanding of institutional threats and vulnerabilities
to its technology, people and processes. Additionally, it evaluates the effects and probabilities of
these threats, vulnerabilities and risk scenarios.

This domain deals with the development and management of risk treatment plans among key
stakeholders, the evaluation of existing controls and improving effectiveness for IT risk mitigation,
and the assessment of relevant risk and control information to applicable stakeholders.

In this domain we interrogate the alignment of business practices with Risk Management and
Information Security frameworks and standards, as well as the development of a risk-aware
culture and implementation of security awareness training.