New Toolkit and Course From ISACA Help Practitioners Develop Risk Scenarios

Risk Scenarios Starter Pack
Author: ISACA
Date Published: 5 July 2022

Risk Scenarios Starter Pack is free for ISACA members

Schaumburg, IL, USA – One of the challenges for IT risk management is to identify important and relevant risk, and one of the best ways to do that is through a well-developed risk scenario providing a realistic and practical view of risk that may prevent an enterprise from achieving its business objectives, historical events, and emerging threats. ISACA has developed a new Risk Scenarios Starter Pack and a concise online course that will help break down each aspect of a risk scenario.

The Risk Scenarios Starter Pack includes 10 sample risk scenarios that practitioners can use and tailor to their specific enterprises. Risk scenarios help improve communication about risk management by constructing a narrative that inspires individuals to take action. The use of risk scenarios helps the risk team to understand and explain risk to the business process owners and other stakeholders.

The 10 scenarios included in the Risk Scenarios Starter Pack are:

  1. IT Services Change Management
  2. Inability to Recruit or Retain IT Staff
  3. Inadequate Patch/Vulnerability Management
  4. Security Configuration Intentionally Modified
  5. Vendor Support Ends
  6. Phishing Attack
  7. Third-Party Suppliers
  8. Failure to Implement Regulatory Changes
  9. Failure to Appreciate Value of Emerging Technologies
  10. Unauthorized Access of Information

With the online companion course, How to Build a Risk Scenario, practitioners will be able to define an IT risk scenario, describe the benefits of using an IT risk scenario, summarize the structure of an IT risk scenario, explain the key points for developing an IT risk scenario, describe the importance of the risk scenario technique, and more. Attendees will receive 1 continuing professional education (CPE) credit.

“Using risk scenarios to overcome the challenge of identifying important and relevant risk brings realism, insight, organizational engagement, improved analysis and structure to the complex matter of IT risk,” says Paul Phillips, ISACA Director of Event Content Development and Risk Professional Practice Lead. “Organizations will benefit from tailoring ISACA’s new risk scenario materials to their specific contexts.”

The How to Build a Risk Scenario course is US$49 for ISACA members US$79 for nonmembers and can be accessed at http://store.sceduc.net/s/store#/store/browse/detail/a2S4w000005GYb0EAG. The Risk Scenarios Starter Pack is free for ISACA members and is available at http://store.sceduc.net/s/#/store/browse/detail/a2S4w000005GFBmEAO.

ISACA also offers additional risk resources, including the Risk Starter Kit, at http://m44kmbbu.sceduc.net/resources/it-risk.

About ISACA

ISACA® (m44kmbbu.sceduc.net) is a global community advancing individuals and organizations in their pursuit of digital trust. For more than 50 years, ISACA has equipped individuals and enterprises with the knowledge, credentials, education, training and community to progress their careers, transform their organizations, and build a more trusted and ethical digital world. ISACA is a global professional association and learning organization that leverages the expertise of its more than 165,000 members who work in digital trust fields such as information security, governance, assurance, risk, privacy and quality. It has a presence in 188 countries, including 225 chapters worldwide. Through its foundation One In Tech, ISACA supports IT education and career pathways for underresourced and underrepresented populations.

Twitter: www.twitter.com/ISACANews
LinkedIn: www.linkedin.com/company/isaca
Facebook: www.facebook.com/ISACAGlobal
Instagram: www.instagram.com/isacanews

Media Contacts

Bridget Drufke, bdrufke@sceduc.net, +1.847.660.5554
Kristen Kessinger, communications@sceduc.net, +1.847.660.5512