The Complete Guide to Business Risk Management

The Complete Guide to Business Risk Management

Author: Kit Sadgrove

Publisher: Routledge

Published: 2020-07-26

Total Pages: 774

ISBN-13: 1000152065

DOWNLOAD EBOOK

Risk management and contingency planning has really come to the fore since the first edition of this book was originally published. Computer failure, fire, fraud, robbery, accident, environmental damage, new regulations - business is constantly under threat. But how do you determine which are the most important dangers for your business? What can you do to lessen the chances of their happening - and minimize the impact if they do happen? In this comprehensive volume Kit Sadgrove shows how you can identify - and control - the relevant threats and ensure that your company will survive. He begins by asking 'What is risk?', 'How do we assess it?' and 'How can it be managed?' He goes on to examine in detail the key danger areas including finance, product quality, health and safety, security and the environment. With case studies, self-assessment exercises and checklists, each chapter looks systematically at what is involved and enables you to draw up action plans that could, for example, provide a defence in law or reduce your insurance premium. The new edition reflects the changes in the global environment, the new risks that have emerged and the effect of macroeconomic factors on business profitability and success. The author has also included a set of case studies to illustrate his ideas in practice.


Security Risk Management

Security Risk Management

Author: Evan Wheeler

Publisher: Elsevier

Published: 2011-04-20

Total Pages: 361

ISBN-13: 1597496162

DOWNLOAD EBOOK

Security Risk Management is the definitive guide for building or running an information security risk management program. This book teaches practical techniques that will be used on a daily basis, while also explaining the fundamentals so students understand the rationale behind these practices. It explains how to perform risk assessments for new IT projects, how to efficiently manage daily risk activities, and how to qualify the current risk level for presentation to executive level management. While other books focus entirely on risk analysis methods, this is the first comprehensive text for managing security risks. This book will help you to break free from the so-called best practices argument by articulating risk exposures in business terms. It includes case studies to provide hands-on experience using risk assessment tools to calculate the costs and benefits of any security investment. It explores each phase of the risk management lifecycle, focusing on policies and assessment processes that should be used to properly assess and mitigate risk. It also presents a roadmap for designing and implementing a security risk management program. This book will be a valuable resource for CISOs, security managers, IT managers, security consultants, IT auditors, security analysts, and students enrolled in information security/assurance college programs. - Named a 2011 Best Governance and ISMS Book by InfoSec Reviews - Includes case studies to provide hands-on experience using risk assessment tools to calculate the costs and benefits of any security investment - Explores each phase of the risk management lifecycle, focusing on policies and assessment processes that should be used to properly assess and mitigate risk - Presents a roadmap for designing and implementing a security risk management program


Risk Management for Events

Risk Management for Events

Author: Julia Rutherford Silvers

Publisher: Routledge

Published: 2020-12-27

Total Pages: 460

ISBN-13: 1000299236

DOWNLOAD EBOOK

Risk Management for Events is a comprehensive and practical guide that supports academic and professional development programs to prepare individuals for entering or advancement in the international events industry. Events of all types are produced every day for all manner of purposes, attracting all sorts of people. Creating and managing the environment in which these people will gather carries with it awesome responsibilities — legal, ethical, and financial. To provide a safe and secure setting and to operate in a manner that ensures that the hosting organizations or individuals achieve their objectives in a proper and profitable way, event risk management must be fully integrated into all event plans and throughout the event management process. This new edition has been revised and updated to include: New case studies and examples from a wide range of international destinations and different types of events. Updated statistics and data throughout. New content on emergent risk, on-site decision-making, terrorism, and public health, including the COVID-19 pandemic, and corruption within events. Updated online material, including a case study archive and weblinks to useful resources. This will be an invaluable resource for all those studying events management.


The Complete Guide to Cybersecurity Risks and Controls

The Complete Guide to Cybersecurity Risks and Controls

Author: Anne Kohnke

Publisher: CRC Press

Published: 2016-03-30

Total Pages: 336

ISBN-13: 149874057X

DOWNLOAD EBOOK

The Complete Guide to Cybersecurity Risks and Controls presents the fundamental concepts of information and communication technology (ICT) governance and control. In this book, you will learn how to create a working, practical control structure that will ensure the ongoing, day-to-day trustworthiness of ICT systems and data. The book explains how to establish systematic control functions and timely reporting procedures within a standard organizational framework and how to build auditable trust into the routine assurance of ICT operations. The book is based on the belief that ICT operation is a strategic governance issue rather than a technical concern. With the exponential growth of security breaches and the increasing dependency on external business partners to achieve organizational success, the effective use of ICT governance and enterprise-wide frameworks to guide the implementation of integrated security controls are critical in order to mitigate data theft. Surprisingly, many organizations do not have formal processes or policies to protect their assets from internal or external threats. The ICT governance and control process establishes a complete and correct set of managerial and technical control behaviors that ensures reliable monitoring and control of ICT operations. The body of knowledge for doing that is explained in this text. This body of knowledge process applies to all operational aspects of ICT responsibilities ranging from upper management policy making and planning, all the way down to basic technology operation.


Enterprise Risk Management

Enterprise Risk Management

Author: James Lam

Publisher: John Wiley & Sons

Published: 2014-01-06

Total Pages: 501

ISBN-13: 1118834437

DOWNLOAD EBOOK

A fully revised second edition focused on the best practices of enterprise risk management Since the first edition of Enterprise Risk Management: From Incentives to Controls was published a decade ago, much has changed in the worlds of business and finance. That's why James Lam has returned with a new edition of this essential guide. Written to reflect today's dynamic market conditions, the Second Edition of Enterprise Risk Management: From Incentives to Controls clearly puts this discipline in perspective. Engaging and informative, it skillfully examines both the art as well as the science of effective enterprise risk management practices. Along the way, it addresses the key concepts, processes, and tools underlying risk management, and lays out clear strategies to manage what is often a highly complex issue. Offers in-depth insights, practical advice, and real-world case studies that explore the various aspects of ERM Based on risk management expert James Lam's thirty years of experience in this field Discusses how a company should strive for balance between risk and return Failure to properly manage risk continues to plague corporations around the world. Don't let it hurt your organization. Pick up the Second Edition of Enterprise Risk Management: From Incentives to Controls and learn how to meet the enterprise-wide risk management challenge head on, and succeed.


Operational Risk Management

Operational Risk Management

Author: Ariane Chapelle

Publisher: John Wiley & Sons

Published: 2019-02-04

Total Pages: 272

ISBN-13: 1119549043

DOWNLOAD EBOOK

OpRisk Awards 2020 Book of the Year Winner! The Authoritative Guide to the Best Practices in Operational Risk Management Operational Risk Management offers a comprehensive guide that contains a review of the most up-to-date and effective operational risk management practices in the financial services industry. The book provides an essential overview of the current methods and best practices applied in financial companies and also contains advanced tools and techniques developed by the most mature firms in the field. The author explores the range of operational risks such as information security, fraud or reputation damage and details how to put in place an effective program based on the four main risk management activities: risk identification, risk assessment, risk mitigation and risk monitoring. The book also examines some specific types of operational risks that rank high on many firms' risk registers. Drawing on the author's extensive experience working with and advising financial companies, Operational Risk Management is written both for those new to the discipline and for experienced operational risk managers who want to strengthen and consolidate their knowledge.


Cyber Strategy

Cyber Strategy

Author: Carol A. Siegel

Publisher: CRC Press

Published: 2020-03-23

Total Pages: 184

ISBN-13: 1000048500

DOWNLOAD EBOOK

Cyber Strategy: Risk-Driven Security and Resiliency provides a process and roadmap for any company to develop its unified Cybersecurity and Cyber Resiliency strategies. It demonstrates a methodology for companies to combine their disassociated efforts into one corporate plan with buy-in from senior management that will efficiently utilize resources, target high risk threats, and evaluate risk assessment methodologies and the efficacy of resultant risk mitigations. The book discusses all the steps required from conception of the plan from preplanning (mission/vision, principles, strategic objectives, new initiatives derivation), project management directives, cyber threat and vulnerability analysis, cyber risk and controls assessment to reporting and measurement techniques for plan success and overall strategic plan performance. In addition, a methodology is presented to aid in new initiative selection for the following year by identifying all relevant inputs. Tools utilized include: Key Risk Indicators (KRI) and Key Performance Indicators (KPI) National Institute of Standards and Technology (NIST) Cyber Security Framework (CSF) Target State Maturity interval mapping per initiative Comparisons of current and target state business goals and critical success factors A quantitative NIST-based risk assessment of initiative technology components Responsible, Accountable, Consulted, Informed (RACI) diagrams for Cyber Steering Committee tasks and Governance Boards’ approval processes Swimlanes, timelines, data flow diagrams (inputs, resources, outputs), progress report templates, and Gantt charts for project management The last chapter provides downloadable checklists, tables, data flow diagrams, figures, and assessment tools to help develop your company’s cybersecurity and cyber resiliency strategic plan.


Risk Management for Project Driven Organizations

Risk Management for Project Driven Organizations

Author: Andy Jordan

Publisher: J. Ross Publishing

Published: 2013-05-13

Total Pages: 361

ISBN-13: 1604270853

DOWNLOAD EBOOK

Organizations invest a lot of time, money, and energy into developing and utilizing risk management practices as part of their project management disciplines. Yet, when you move beyond the project to the program, portfolio, PMO and even organizational level, that same level of risk command and control rarely exists. With this in mind, well-known subject matter expert and author Andy Jordan starts where most leave off. He explores risk management in detail at the portfolio, program, and PMO levels. Using an engaging and easy-to-read writing style, Mr. Jordan takes readers from concepts to a process model, and then to the application of that customizable model in the user’s unique environment, helping dramatically improve their risk command and control at the organizational level. He also provides a detailed discussion of some of the challenges involved in this process. Risk Management for Project Driven Organizations is designed to aid strategic C-level decision makers and those involved in the project, program, portfolio, and PMO levels of an organization. J. Ross Publishing offers an add-on for a nominal fee -- Downloadable tools and templates for easy customization and implementation.


Managing Cybersecurity Risk

Managing Cybersecurity Risk

Author: Jonathan Reuvid

Publisher: Legend Press

Published: 2018-02-28

Total Pages: 304

ISBN-13: 1787198901

DOWNLOAD EBOOK

The first edition, published November 2016, was targeted at the directors and senior managers of SMEs and larger organisations that have not yet paid sufficient attention to cybersecurity and possibly did not appreciate the scale or severity of permanent risk to their businesses. The book was an important wake-up call and primer and proved a significant success, including wide global reach and diverse additional use of the chapter content through media outlets. The new edition, targeted at a similar readership, will provide more detailed information about the cybersecurity environment and specific threats. It will offer advice on the resources available to build defences and the selection of tools and managed services to achieve enhanced security at acceptable cost. A content sharing partnership has been agreed with major technology provider Alien Vault and the 2017 edition will be a larger book of approximately 250 pages.


Handbook of Financial Risk Management

Handbook of Financial Risk Management

Author: Thierry Roncalli

Publisher: CRC Press

Published: 2020-04-23

Total Pages: 1430

ISBN-13: 1351385224

DOWNLOAD EBOOK

Developed over 20 years of teaching academic courses, the Handbook of Financial Risk Management can be divided into two main parts: risk management in the financial sector; and a discussion of the mathematical and statistical tools used in risk management. This comprehensive text offers readers the chance to develop a sound understanding of financial products and the mathematical models that drive them, exploring in detail where the risks are and how to manage them. Key Features: Written by an author with both theoretical and applied experience Ideal resource for students pursuing a master’s degree in finance who want to learn risk management Comprehensive coverage of the key topics in financial risk management Contains 114 exercises, with solutions provided online at www.crcpress.com/9781138501874