Master Practical Risk Assessment Techniques Part 2: Step-by-Step Guide 2024

[@vishnupriyatamilarasan9099]

Watching this now and its so useful, Thank you Atul & Prabh 👏

[@nicolasrigo6675]

Great introduction to risk assessment. I rarely got the opportunity to listen to such a practical introduction. Thanks so much for that. I would although expected you to introduce in your example sheet the notion of risk appetite so that you know your residual risk level is within or still outside your appetite after the treatment.

[@SaketBadadal]

Great insight! thank you Atul & Prabh.

[@vipulsharma4u1]

Thanks for the detailed information on risk management, and it has given me some more areas to consider in risk assessment. However, I think we also have to have risk scoring, or risk rating, such as if an organization has 40+ risks (hypothetically 😊), then we can choose the top ten risks based on the score or we can sort the risk on scale. calculation can be based on likelihood*overall impact, and that can define the overall risk Impact.

[@davidmartins7049]

Excellent presentation by the panel.

[@acritesh]

Thank you prabh and Atul for sharing such insight.

[@dhanveerck7333]

Thank you, Prabh & Atul for this wonderful session, one point would like to clarify here about impact after RTP, impact remains same right, how it would become less impact.

[@SwatiRana-l3d]

Thank you!

[@VIJAYKARWANDE-b1s]

Very Informative, Thank you Prabh and Atul

[@Bigg_boss_bytes]

A very informative session. Loved the duo

[@hanfiachoudhary207]

Informative and great Insight,Thank you!

[@vback4238]

So thankful for this content!

[@errolabrahams7878]

Good presentation. I enjoyed the explanation. Well done:-)

[@haider.mulani]

Very informative. Thanks

[@Champingcom]

Thanks a lot!

[@rudrabhattacharyya891]

Great insights by Atul , but the examples can be informed and clarification need to get better. It's not very clear. Otherwise it's a great learning session. Thanks 😊

[@sathishpannuru1099]

i would like practical approach...thank you

[@SomyaJain-i8q]

Thanks Atul & Prabh for the informative session! A question- The example you showed for version TLS1.0(I mean using obsolete/vulnerable versions) in network devices. Such kinds of checks would be covered under Vulnerability management as well so shall we consider under Risk register? If yes, which of them shall we consider, shall we filter out with impact and critical vulnerabilities. I hope I made my question clear!

[@atulrishav3229]

Thanks for watching. This is merely an example of how a known risk should be registered and monitored. For instance, a small company wouldn't even have a vuln mgnt program. In that case an umbrella for "network security" will be created under which known vulns such as TLS would be recorded and tracked periodically. What and how a risk should be registered and monitored is solely dependent on the business and their priorities. Hope that makes sense. Feel free to respond with further queries if needed. Cheers!!

[@duamohamed639]

very informative

[@sandeepgoli6719]

Hi prabh, how to identify risk in the organization do we have any tools for that.

[@akahibeoluchi4413]

This is very informative, thank you for taking the time to share. Regarding the Risk treatment plan, what tools can one use to conduct Network device assessments in case this is asked in an interview?

[@atulrishav3229]

There are plethora of open source and paid network scanning tools such as Qualys, Tenable, Nmap, and such. Depending on the business risk appetite and budget, one can choose either open source or a paid tool. Do remember that budgeting also includes people's time as well. It can be performed inhouse or outsourced if not capable.

[@akahibeoluchi4413]

You are awesome! Thank you so much.

[@capricornn4889]

please share link to download risk register template

[@thkhan]

how to get the excel template?

[@bheemmetre7539]

Hi sir do you have live class

[@watchingisfun1835]

I am looking the template.

[@padmasrig811]

Vendor management we want to hear next

[@atulrishav3229]

Noted.

[@willsausimeworld]

The template please?

[@deepstarn]

Hi Atul & Prabh, I am looking to pursue my career into risk management and more of GRC role, also holding ISO 31000 risk management certification and ISO 27001 Lead Auditor ISMS. Are there any workshop conducted where i can nominate myself to be part of any assignment or project you run to get hands on. Please let me know. I have 13 yrs of experience in IT Service Management but would want to switch to risk management now as part of career progression

[@jagadishakarapu8491]

IT risk analyst

[@volvorin6891]

Atul you are giving too phaltu type of example to explain the concept.