Day 1: Start of a risk assessment with MEHARI

Concepts and definitions related to risk management

Standards, frameworks and methodologies in risk management

Presentation of MEHARI

Assessment and classification issues

The value chain for failures

Classification of resources

Day 2: Assessment of vulnerabilities and risk, according MEHARI

Assessment of the vulnerabilities

Qualities of a security service

Measuring the quality of a security service

Evaluation process

Risk assessment

Day 3: Security planning according to MEHARI & Exam

Security plans and procedures

Tools to support the implementation of MEHARI

The “MEHARI advanced” exam (3 hours)

Risk managers 

Persons responsible for information security or conformity within an organization

Member of the information security team

IT consultants

Staff participating in the activities of risk assessment with the MEHARI method

To develop the necessary skills to conduct a risk assessment with the MEHARI method

To master the steps to conduct a risk assessment with the MEHARI method

To understand the concepts, approaches, methods and techniques allowing an effective management of risk according to MEHARI

To interpret the requirements of ISO 27001 on information security risk management

To understand the relationship between the information security risk management, the security controls and the compliance with the requirements of different stakeholders of an organization

Day 1: Start of a risk assessment with MEHARI

Day 2: Assessment of vulnerabilities and risk, according MEHARI

Day 3: Security planning according to MEHARI & Exam

شهادة معتمدة من البورد البريطاني للتقييم المهني ( PECB( Professional Evaluation And Certification Board والمعتمد من معهد المعايير الوطنية الامريكية ANSI