This course discusses how to find and control risks in information assets using risk identification, assessment and analysis, and control approaches. Moreover, it covers malicious human behavioral factors that harm information systems. In this course you will learn about risk management, corporate governance, IT risk assessment, risk monitoring, risk identification, risk analysis, risk evaluation, risk treatment, risk response and reporting, and how to implement and manage a risk management program.