Risk Management for Cyber Security Managers - Risk Identification

The video tutorial covers cyber risk management, focusing on risk identification. It introduces the risk register, a tool used by risk managers to document risk management activities, and explains its features such as risk statement, assets involved, risk treatment, and more. An example of a risk register is provided, illustrating how to document a phishing attack risk. The tutorial also discusses different templates and examples of risk registers. Finally, it explains how to identify risks using the CIA triad, emphasizing confidentiality, integrity, and availability as core pillars of cybersecurity.

What is the primary purpose of a risk register in cyber risk management?

• To store customer data

• To track employee performance

• To document risk management activities

• To manage financial transactions

Which of the following is NOT a common feature of a risk register?

• Risk treatment

• Employee salaries

• Assets involved

• Risk statement

In the given example, what is the risk treatment plan for phishing attacks?

• Implementing a firewall

• Conducting formal training and using phishing detection software

• Hiring more IT staff

• Changing all passwords monthly

What is a key takeaway about risk registers from the examples provided?

• They are identical across all organizations

• They must include financial data

• They can be customized with different features

• They are only used in large companies

What does the 'C' in the CIA triad stand for?

• Communication

• Compliance

• Confidentiality

• Control

Which pillar of the CIA triad ensures that data is not altered?

• Confidentiality

• Integrity

• Availability

• Authentication

What is the main focus of the CIA triad in cybersecurity?

• To enhance customer satisfaction

• To increase company profits

• To ensure data security and risk identification

• To manage employee productivity