Enterprise Risk Management (ERM) is defined by the Committee of Sponsoring Organizations (COSO) as "a process, effected by an entity's board of directors, management and other personnel, applied in strategy-setting and across the enterprise, designed to identify potential events that may affect the entity, and manage risk to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives."
ERM can also be described as a risk-based approach to managing an enterprise, integrating concepts of internal control, the SarbanesāOxley Act, and strategic planning.
The COSO ERM Framework has eight Components and four objectives categories. It is an expansion of the COSO Internal Control-Integrated Framework published in 1992 and amended in 1994. The eight components - additional components highlighted - are:
Ā
ERM aims to measure an institution's achievement of four primary objectives:
All our consultants are senior professional with tremendous exposure to Information Security and Governance Risk & Compliance. With over a decade of experience in training & consulting, they help bring a lot of practical and industry relevant examples with case studies to the classroom which improves the overall learning experience. Our professional hold industry acclaimed accreditation such as : Phd , M.S , CISSP, CHFI, CISA, CISM, CEH, ISO 27001 LI / LA, CCNP, CWNA , MCSE & ITIL.
infySEC IS Lab is an extreme Online Virtual Remote Lab provided to participants where they can work from any place at any point of time without restriction. ISLab provides login privilege to Certified Ethical Cracker participants where they can work in our Virtual Remote Server and start doing their Labs.
Our ISLab was created in such a concept called āLearn with Funā where each participant will face gaming-like structured online hacking program called 'Live Hacking Zone' which contains many Levels relevant to the topics covered on the program. Each participant has to cross levels to face CEC exam, Hence CEc will only deliver equipped candidates. Participant have to cross multiple Levels starting with easy to toughest level. Each participant can track other participants activity live which helps each participants to get involved into Live Hacking Zone competition, Prepare to be SHOCKED, ENTERTAINED and EDUCATED all at the same time.
Ā
The content of infySEC syllabuses is regularly updated to ensure that it remains relevant and reflects the latest thinking in par with the scenario of current technology . However, as part of the latest review, the documents themselves have been given a fresh design.
FLOW OFĀ ERM COURSE
Ā
S.No | TOPICS |
1 | History and Introduction to Risk and Control |
2 | Risk assessment, Analysis & Evalution |
3 | Control Models (COSO and CoCo) |
4 | Using COSO to Evaluate Internal Control |
5 | Understanding Control Self-Assessment |
6 | Control Self-Assessment Basics |
7 | Effective Methods for Identifying Risks |
8 | Examining, Evaluating, and Reporting on Managementās ERM Processes |
9 | Measuring Business Risk - Quantitatively and Qualitatively |
10 | The Internal Audit Role in Enterprise Risk Management |
11 | Risk Monitoring |
12 | Business continuity Planning |