Information security risk management: From confusion to a working model

Infosec risk management is the foundation of modern security and compliance, but in many organizations it remains unclear, fragmented, or reduced to an annual Excel exercise.

In this webinar, we’ll break down what infosec risk management actually means in practice, how the process should work end to end, and why many organizations struggle to keep it alive. We’ll then show concrete, proven ways to run risk management continuously and connect it to your broader ISMS work - including practical examples of how this can be done in Cyberday.

Whether you’re building your first risk management process or trying to make an existing one actually work, this session will give you a clear, practical model to follow.

What you’ll learn

• What infosec risk management really is - and how it differs from vulnerability lists, compliance checklists, and one-off risk assessments
• How to run a practical, continuous risk management process - from identifying and evaluating risks to treating and monitoring them over time
• How to turn risk management into an operational system - with clear ownership, workflows, and reporting instead of spreadsheets and fire drills

Webinar is suitable for any people information security key people in organisations, who are interested in systematic information security management and demonstrating good security level for customers.

Webinar agenda

1. What is information security risk management?

• Main idea
• Success factors
• Common challenges

2. Information security risk management process

• The basic main risk process
• Best practices for risk evaluation
• Different approaches to risk management (asset-based, general, change management)

3. Keeping your risk management active

• Different running methods for risk management
• Connection to different parts of your ISMS

4. Demo: Building your ISMS in Cyberday

• Built-in rIsk automation
• AI assistant support
• Implementing general infosec risk management

5. Demo: Special risk assessments in Cyberday

• Change or theme-based assessments
• Asset-based risk identification

💡 Plenty of additional risk management content available @ Cyberday.ai website

We welcome questions and comments throughout the webinar! These are also an important part of the webinar content.

P.s. Registering for the webinar doesn't commit you to anything. You may also participate either "live" or via the recording, which you will receive automatically via email after the webinar is over.