Professor Messer

There are many good reasons to perform ongoing technology audits. In this video, you’ll learn about internal audits, external audits, and more. << Previous Video: Privacy Next Video: Penetration Tests >> The term “audit” often has a negative connotation, but there can be very good reasons for running an audit, especially in the context of […]

There are many laws and guidelines associated with the data collected by an organization. In this video, you’ll learn about legal implications associated with privacy, data responsibilities, and data inventory and retention. << Previous Video: Compliance Next Video: Audits and Assessments >> Our organizations collect a massive amount of data. And there are privacy laws

Many organizations must meet a specific standard of laws, policies, and regulations. In this video, you’ll learn about regulatory compliance, reputational damage, compliance monitoring, and more. << Previous Video: Agreement Types Next Video: Privacy >> Compliance is the process of meeting a series of standards. These standards may be created by regulations or laws, or

Contracts and agreements are an important part of risk management. In this video, you’ll learn about service level agreements, memorandums of understanding, non-disclosure agreements, and more. << Previous Video: Third-party Risk Assessment Next Video: Compliance >> If you’re working with a service provider, you may want to set certain requirements for uptime or availability. And

It’s often necessary to work with third-parties to mitigate risk. In this video, you’ll learn about right-to-audit clauses, supply chain analysis, vendor monitoring, and more. << Previous Video: Business Impact Analysis Next Video: Agreement Types >> Every organization works with vendors of some kind. These might be an organization that provides payroll services. You might

A security event can have a significant impact to the organization. In this video, you’ll learn how to determine a recovery time objective, recovery point objective, mean time to repair, and mean time between failures. << Previous Video: Risk Management Strategies Next Video: Third-party Risk Assessment >> When recovering from an outage, one of the

We have many options with managing risk. In this video, you’ll learn about transferring risk, accepting risk, avoiding risk, and more. << Previous Video: Risk Analysis Next Video: Business Impact Analysis >> An organization might use a number of different strategies to deal with risk. One of these strategies might be to transfer the risk.

To manage risk, we have to understand the risk we carry. In this video, you’ll learn about risk assessments, risk appetite, risk tolerance, and risk registers. << Previous Video: Risk Management Next Video: Risk Management Strategies >> Determining levels of risk can vary widely on how many different variables are involved. One way to evaluate

Risk management helps to understand the potential risks to an organization. In this video, you’ll learn about risk assessments, ad hoc assessments, and recurring assessments. << Previous Video: Data Roles and Responsibilities Next Video: Risk Analysis >> Most organizations have some level of risk management that allows them to identify where risks might be and

The management of data is the responsibility of many individuals. In this video, you’ll learn about data owners, data controllers, data processors, and more. << Previous Video: Security Considerations Next Video: Risk Management >> There are many different people in the organization responsible for different aspects of the data that we’re storing. And in this