title
Please take a moment to fill out this form. We will get back to you as soon as possible.
All fields marked with an asterisk (*) are mandatory.
CDRP - Certified Data Center Risk Professional
Course Description
Overview
This 2-day course is designed to expose attendants to the overall risk management process. Focus is on both the data center infrastructure and the physical data center facility and equipment; the attendant will learn how to identify and quantify risk in their organisation, creating the ability to reduce the risk to a level acceptable for the organisation. The course is based on international standards (ISO/IEC27001:2005) and guidelines (ISO/IEC27005:2011, NIST800-30, ISO/IEC31000) and will additionally prepare the candidate being able to take part and assist in corporate certification processes that may apply.
Objectives
- Understand the different standards and methodologies for risk management and assessment
- Establish the required project team for risk management
- Perform the risk assessment, identifying current threats, vulnerabilities and the potential impact based on customised threat catalogues
- Report on the current risk level of the data center both quantitative and qualitative
- Anticipate and minimise potential financial impacts
- Understand the options for handling risk
- Continuously monitor and review the status of risk present in the data center
- Reduce the frequency and magnitude of incidents
- Detect and respond to events when they occur
- Meet regulatory and compliance requirements
- Support certification processes such as ISO/IEC 27001
- Support overall corporate and IT governance
Audience
The primary audience for this course is an IT, Facilities or Data Center Operations professional working in and around the data center (representing both end-customers and/or service provider/facilitators) and having responsibility to achieve and improve hi-availability and manageability of the Data Center, such as: Data center managers, Operations / Floor / Facility managers, IT managers, Information security managers, Security professionals, Auditors / Risk Managers / Professionals responsible for IT/corporate governance.
Prerequisites
There is no specific prerequisite for the CDRP course. However, participants who have at least three years' experience in a data center and/or IT infrastructures will be best suited. This experience may come from a business or IT background where the participant has knowledge of both environments, and understands the mission of their organisation. Attendance of CDCP is beneficial but not a requirement.
Topics
Introduction to Risk Management
- Risk management concepts
- Senior management and risk
- Enterprise Risk Management (ERM)
- Benefits of risk management
Data Center Risk and Impact
- Risk in facility, power, cooling, fire suppression, infrastructure and IT services
- Impact of data center downtime
- Main causes of downtime
- Cost factors in downtime
Standards, Guidelines and Methodologies
- ISO/IEC 27001:2013, ISO/IEC 27005:2011, ISO/IEC 27002:2013
- NIST SP 800-30
- ISO/IEC 31000:2009
- SS507:2008
- ANSI/TIA-942
- Other methodologies (CRAMM, EBIOS, OCTAVE, etc.)
Risk Management Definitions
- Asset
- Availability/Confidentiality/Integrity
- Control
- Information processing facility
- Information security
- Policy
- Risk
- Risk analysis/Risk assessment/Risk evaluation/
- Risk treatment
- Threat/Vulnerability
- Types of risk
Risk Assessment Software
- The need for software
- Automation
- Considerations
Risk Management Process
- The risk management process
- Establishing the context
- Identification
- Analysis
- Evaluation
- Treatment
- Communication and consultation
- Monitoring and review
Project Approach
- Project management principles
- Project management methods
- Scope
- Time
- Cost
- Cost estimate methods
Context Establishment
- General considerations
- Risk evaluation, impact and acceptance criteria
- Severity rating of impact
- Occurrence rating of probability
- Scope and boundaries
- Scope constraints
- Roles & responsibilities
- Training, awareness and competence
Risk Assessment - Identification
- The risk assessment process
- Identification of assets
- Identification of threats
- Identification of existing controls
- Identification of vulnerabilities
- Identification of consequences
- Hands-on exercise: Identification of assets, threats, existing controls, vulnerabilities and consequences
Risk Assessment - Analysis and Evaluation
- Risk estimation
- Risk estimation methodologies
- Assessment of consequences
- Assessment of incident likelihood
- Level of risk estimation
- Risk evaluation
- Hands-on exercise: Assessment of consequences,
- probability and estimating level of risk
Risk Treatment
- The risk treatment process steps
- Risk Treatment Plan (RTP)
- Risk modification
- Risk retention
- Risk avoidance
- Risk sharing
- Constraints in risk modification
- Control categories
- Control examples
- Cost-benefit analysis
- Control implementation
- Residual risk
Communication
- Effective communication of risk management activities
- Benefits and concerns of communication
Risk Monitoring and Review
- Ongoing monitoring and review
- Criteria for review
Risk scenarios
- Risk assessment approach
- Data center site selection
- Data center facility
- Cloud computing
- UPS scenarios
- Force majeure
- Organisational shortcomings
- Human failure
- Technical failure
- Deliberate acts
Related Courses
-
CDFOM - Certified Data Center Facilities Operations Manager
CDFOM-EPI- Duration: 3 Days
- Delivery Format: Classroom Training, Online Training
- Price: 2,900.00 USD
-
CDMS - Certified Data Center Migration Specialist
CDMS-EPI- Duration: 2 Days
- Delivery Format: Classroom Training, Online Training
- Price: 2,100.00 USD
Self-Paced Training Info
Learn at your own pace with anytime, anywhere training
- Same in-demand topics as instructor-led public and private classes.
- Standalone learning or supplemental reinforcement.
- e-Learning content varies by course and technology.
- View the Self-Paced version of this outline and what is included in the SPVC course.
- Learn more about e-Learning
Course Added To Shopping Cart
bla
bla
bla
bla
bla
bla
Self-Paced Training Terms & Conditions
Exam Terms & Conditions
Sorry, there are no classes that meet your criteria.
Please contact us to schedule a class.
STOP! Before You Leave
Save 0% on this course!
Take advantage of our online-only offer & save 0% on any course !
Promo Code skip0 will be applied to your registration
Purchase Information
title
Please take a moment to fill out this form. We will get back to you as soon as possible.
All fields marked with an asterisk (*) are mandatory.