Enterprise Security Risk Management

Overview

Build security risk management into how the organisation works.

In a rapidly evolving digital landscape, safeguarding organisational assets and information has become more critical than ever. This workshop equips professionals with the knowledge and skills to implement robust Enterprise Security Risk Management (ESRM) practices.

The programme covers the fundamentals of risk management, widely recognised security frameworks, and real-world case studies. Participants gain insight into threat assessment, vulnerability management, and incident response and business continuity planning — and leave prepared to integrate ESRM into the organisational culture, meet regulatory requirements and foster a security-conscious environment.

Programme

What the workshop covers.

Understanding security risk management

• Definition of ESRM and its importance in modern organisations

Fundamentals of risk management

• Risk identification, assessment and prioritisation
• Risk mitigation strategies
• Risk monitoring and review

Enterprise security frameworks

• Overview of popular frameworks, including ISO 27001 and the NIST Cybersecurity Framework
• How frameworks align with ESRM principles
• Case studies demonstrating framework implementation

Threat assessment and vulnerability management

• Identifying and categorising threats to the enterprise
• Threat actors and their motivations
• Analysing current threat intelligence sources
• Techniques for identifying vulnerabilities in systems and processes
• Vulnerability scoring, prioritisation, tools and methodologies

Patch management and remediation

• The importance of timely patching in reducing security risks
• Strategies for effective patch management
• Case studies on the consequences of poor patch management

Incident response and business continuity

• Developing an incident response plan
• Roles and responsibilities during an incident
• Tabletop exercises and simulations
• Identifying critical business functions and dependencies
• Developing and testing business continuity plans

Integration of ESRM into organisational culture

• Creating a security-conscious culture
• Training and awareness programmes
• Continuous improvement in ESRM practices

Compliance and regulatory considerations

• Integrating risk assessment into compliance frameworks
• The role of risk management in meeting regulatory requirements
• Challenges and best practices in compliance management

About the faculty

Leon Chandler

Mr Leon Chandler is an experienced security professional and training consultant holding the CPP, PSP and PCI certifications. A member of ASIS International, he provides consultancy services including investigations, security risk assessments, security site surveys and security officer training.

He served in the Trinidad and Tobago Defence Force for ten years and as a Security Coordination Assistant with the United Nations for four years. He lectures on physical security and investigations, and prepares candidates for the ASIS CPP certification.

Details

Delivery and fee.

Fees are those on the current course outline. Confirmed dates for every course are published on our upcoming intakes page; the Executive Education team will confirm the next intake for this course on enquiry.