IT GOVERNANCE, RISK AND COMPLIANCE

Teacher

Guest faculty

Category

Core Courses

Course Attendees

Still no participant

Course Reviews

Still no reviews

Course Name : IT GOVERNANCE, RISK AND COMPLIANCE

Code(Credit) :CUTM1687(4-0-0)

Course Objectives

This course focusses on two aspects of Cyber Security: analysis and assessment of risk plus how to minimize it, and, how to extract and use digital information from a wide range of systems and devices. The course is structured so that all students cover the same introductory material, but then choose to specialize in either Cyber Security or Digital Forensics. Any aforesaid science graduate who requires keen interest & knowledge of IT programming languages with basic knowledge of math beyond calculus.

Learning Outcomes

  • Understand the concepts of governance, risk management and compliance (GRC)
  • Understand the regulatory environment
  • The reason for being governance is essential for effective regulatory compliance risk management
  • Identify high-risk areas and compliance in your organization
  • Apply Risk-based Approach
  • The role of the compliance officer and his team
  • Develop and implement a governance, risk management and compliance strategic plan
  • Understand, define, and enhance organizational culture as it relates to performance, risk, and compliance
  • Implement governance, risk management and compliance processes that are effective and efficient
  • Using a risk-based audit approach

Course Syllabus

MSCS2102-IT GOVERNANCE, RISK AND COMPLIANCE

 

MODULE (I):                                                                                                           

 

Governance, Risk & Compliance GRC–Definitions–Governance,Risk,Compliance,Risk Threshold, Risk Modeling, Risk Appetite, GovernanceStandards. Best Practices for IT Governance–ITIL - ISO/IEC 27001 - Control Objectives of Information and Related Technology (COBIT) – TheInformation Security Management Maturity Model - Capability Maturity Model – latest standards andcompliance technologies.

 

MODULE (II):                                                                                                                     

 

Information Security Governance -Effective Information Security Governance - Importance ofInformation Security Governance - Outcomes of Information Security Governance - Strategic alignment – RiskManagement - Performance Measurement - Information System Strategy - Strategic Planning - Steering Committee- Policies and Procedures.

 

MODULE (III):                                                                                                                    

 

Information Security Management Practices-Personnel Management - Financial Management–Quality Management - Information Security Management - Performance Optimization - Roles and Responsibilities - Auditing IT Governance Structure - Evaluation Criteria & Benchmark  - Assessment Tools -Case Study Analysis - Risk Management framework–COSO - The Internal environment - Objective Setting -Event Identification - Risk assessment - Risk Response - Control activities - Information & communication–Monitoring–NIST - Risk Assessment - Risk Mitigation - Evaluation & Assessment - Case Study Analysis.

 

MODULE (IV):                                                                                                                    

 

Compliance–Introduction-Information Technology and security - Evolution of Information systems -Roles and responsibilities - Audit, Assessment and review - The Role of the Compliance Officer - The duties and responsibilities of the compliance officer and the function of compliance - Compliance officer activities - The requirements of a Compliance Officer - Drafting compliance reports – Designing an Internal Compliance System -Regulatory principles–Issues - Developing high-level compliance policies - Defining responsibility for compliance- The compliance function - Specific internal compliance control issues–Information System Audit - Scope ofSystem Audit - Audit Planning - Audit Manual - Audit check lists - Audit Reports - Best Practices for ITcompliance and Regulatory Requirements.

Session Plan

Session 1

Governance,Risk,Compliance:

GRC-1

Session 2

Governance,Risk,Compliance

Session 3

Risk Threshold, Risk Modeling, Risk Appetite

Session 4

Governance Standards. Best Practices for IT Governance

Session 5

ITIL - ISO/IEC 27001 - Control Objectives of Information and Related Technology

Session 6

(COBIT) – The Information Security Management Maturity Model

Session 7

Capability Maturity Model – latest standards and compliance technologies

Session 8

Information Security Governance,Effective Information Security Governance 

Session 9

 Importance of Information Security Governance

Session 10

 Outcomes of Information Security Governance

Session 11

Strategic alignment – Risk Management

Session 12

Performance Measurement - Information System Strategy

Session 13

Strategic Planning - Steering Committee

Session 14

 Steering Committee- Policies and Procedures.

 

Session 15

Personnel Management

Session 16

Financial Management–Quality Management

Session 17

Information Security Management - Performance Optimization

Session 18

Information Security Management-Roles and Responsibilities

Session 19

Auditing IT Governance Structure - Evaluation Criteria & Benchmark

Session 20

Assessment Tools -Case Study Analysis

Session 21

Risk Management framework

Session 22

COSO - The Internal environment - Objective Setting -Event Identification

Session 23

Risk assessment - Risk Response - Control activities - Information & communication

Session 24

Monitoring–NIST - Risk Assessment

Session 25

Risk Mitigation - Evaluation & Assessment - Case Study Analysis

Session 26

Evolution of Information systems -Roles and responsibilities

Session 27

The Role of the Compliance Officer - The duties and responsibilities of the compliance officer 

Session 28

 function of compliance - Compliance officer activities

Session 29

The requirements of a Compliance Officer - Drafting compliance reports

Session 30

 Designing an Internal Compliance System -Regulatory principles–Issues

Session 31

Developing high-level compliance policies - Defining responsibility for compliance

Session 32

The compliance function - Specific internal compliance control issues

Session 33

Information System Audit - Scope of System Audit

Session 34

Audit Planning - Audit Manual - Audit check lists

Session 35

Audit Reports - Best Practices for IT compliance

Session 36

Best Practices for  Regulatory Requirements

Case Studies

Case Studies

Recent Comments

    Our Main Teachers