GoConqr has a new look! Let us know what you think.

Risk Management

99 resources created by 70 users

This Risk Management page on GoConqr gathers community-made quizzes, mind maps, flashcards and notes, from risk calculation and risk assessment to third-party oversight and enterprise resiliency. It's built for university students and professional candidates practising for exams such as CISSP, Security+, CRISC, CISM, CISA and CIS-TPRM, and for teachers after ready-made material. There are over 90 resources here, including more than 30 quizzes, over 30 mind maps and more than 20 flashcard decks. Pick a resource, try a quiz to find your gaps, then make your own.

Top Risk Management resources

Notes

More Cybersecurity topics

About Risk Management

GoConqr Original

What this unit covers

This page sits in the Governance, Risk, Law and Professional Practice strand of Cybersecurity. Its resources look at how organisations spot, measure and respond to risk. You will find scenario questions on collusion and embezzlement, disaster recovery and acceptable data loss, ransomware on a backup server, and what to do when a critical risk cannot be mitigated straight away.

Where to start

Begin with a mind map to see the whole picture. The CISSP Dominio 1 Security and Risk Management map links security concepts, governance, policies, compliance, legal issues, ethics, risk management and personnel security. The two Security Mgt U5 maps on risk analysis walk through the stages of the process, from asking what the information is worth to choosing countermeasures.

If you prefer a shorter first step, open the Risks flashcard deck. It covers control types (technical, management and operational), false positives and negatives, privacy policies and acceptable use policies.

Practising with quizzes

Once the ideas feel familiar, move to quizzes. The S+ Objective 2.1 Quiz suits Security+ candidates. CISSP - Chapter 1 and Security and Risk Management (Domain 1) fit CISSP study. CISM Domain 1 Quiz 1 and CISM Domain 1 Quiz 2 cover CISM, and the CIS-TPRM mock quizzes are there for third-party risk. The NIST 800-30 Revision 1 quiz is useful for assessment methods.

  1. Read a map or flashcard deck on a topic.
  2. Take a quiz on the same topic without notes.
  3. Note the questions you missed.
  4. Go back to the map and read those branches again.

Going deeper

For CRISC-style thinking, try the CRISC study material deck, plus the decks on risk scenario development and on risk assessment concepts, standards and frameworks. For calculation practice, look at S+ Objective 2.1 Risk Calculation Flashcards and the deck on annualized rate of occurrence (ARO). Teachers can use any of these as ready-made starting points for a class or study group.

Choose one resource that matches your exam, work through it, and then build your own maps and flashcards from what you found hard.

Frequently asked questions

Which resource should I open first?

Start with the CISSP Dominio 1 Security and Risk Management mind map if you want an overview, or the Risks flashcard deck if you want quick definitions. Both give you the vocabulary you need before you try the scenario-style quizzes on this page.

Which exams do these resources mention?

The listed resources mention CISSP, Security+, CRISC, CIS-TPRM, CISM and CISA. Look at titles such as CISM Domain 1 Quiz 1, the CRISC study material deck and the CIS-TPRM mock quizzes to find the one that matches your route.

Are the resources free to use?

Yes. Every resource listed here is free to open, study and take, with no account needed. They were made by GoConqr users rather than by GoConqr itself, so it helps to check them against your own course or exam material.

What do the mind maps cover?

They cover the risk process from identifying assets, threats and vulnerabilities to analysis, countermeasures and audit. Others cover frameworks, third-party security, cyber risk and a taxonomy of operational cyber security risks, so you can pick the angle you need.

Can I save my scores or make my own material?

A free account saves your quiz scores and lets you make your own quizzes, mind maps, flashcards and notes. That is handy for turning the questions you missed into a personal revision set.

Who is this page for?

It is aimed at university students and professional candidates preparing for security and risk exams, and at teachers who want ready-made quizzes, maps and flashcards to share with a class or study group.

Feedback

What is it about?

What do you think of the new look?

How do you like it?