Risk Assessment and Management in Cybersecurity | Board Infinity
Home/Courses/Cybersecurity/Risk Management
Course 2 of 3 Cybersecurity Fundamentals with Cisco Tools Specialization

Risk Assessment and Management in Cybersecurity

Identify, evaluate and manage IT risks in line with business goals: work with frameworks like ISO 31000 and NIST, run qualitative and quantitative risk assessments, and build mitigation, business continuity and governance plans that keep an organization resilient.

Enroll on Coursera
≈ 9 hours 3 modules · 12 assignments Intermediate level English · 26 languages available
Want a coach alongside the course? See 1:1 coaching
Board Infinity Board InfinityInstructor · 287 courses on Coursera
Definitions and Categories of IT Risk · 6:05

Learn from real cases

Case studies and real-world examples in every module

Certificate included

Shareable on LinkedIn the day you finish

Built by industry experts

Board Infinity: 287 courses, 479,000+ learners on Coursera

6 Lakh+learners on our Coursera courses
10+domains covered
270+courses
57+specializations
01 About the course

Manage cyber risk the way the business sees it.

Three modules: understand IT risk, assess it, then mitigate it and build it into strategy.

3
Modules
Identify, assess, mitigate
27
Video lessons
Plus 9 readings
12
Assignments
3 graded quizzes, 9 practice
9h
Total learning time
Self-paced, flexible deadlines

Risk Assessment and Management in Cybersecurity equips you to identify, evaluate and manage IT risks in alignment with business goals - from IT risk categories and frameworks like ISO 31000 and NIST to the new vulnerabilities brought by AI, cloud computing and IoT.

You'll conduct risk assessments using qualitative and quantitative methods, use risk registers, matrices and scoring models, prioritize risks against risk appetite, then develop mitigation strategies, business continuity plans and a culture of risk awareness - through case studies and real-world examples.

It's course 2 of Board Infinity's Cybersecurity Fundamentals with Cisco Tools specialization on Coursera, for IT professionals, cybersecurity analysts and business leaders.

Inside the course
01Understanding IT risk≈ 3h 02Conducting risk assessments≈ 3h 03Risk mitigation & strategic planning≈ 3h
02 Who it's for

Built for the people who own the risk register.

An intermediate course - it fits best if you already work around IT systems, security or business planning.

IT professionals

Running the systems at risk

Identify and assess the risks in the infrastructure, cloud and applications you manage.

Cybersecurity analysts

Moving from threats to risk

Turn threat knowledge into prioritized, business-aligned risk decisions.

Business leaders

Deciding where to invest

Weigh risk appetite, cost-benefit and continuity planning at the strategy level.

Risk & compliance

Working with frameworks

Apply ISO 31000 and NIST, and align governance with industry standards.

03 What you'll learn

Identify, assess, mitigate - then make it stick.

Coursera's three stated outcomes, plus the risk-aware culture the final module builds.

Module 1

Understand IT risk

Understand IT risk categories, their impact on business objectives, and frameworks like ISO 31000 and NIST.

Module 2

Assess and prioritize

Analyze and evaluate IT risks with qualitative and quantitative methods, and prioritize them by business goals.

Module 3

Mitigate and plan for continuity

Apply risk controls and response strategies, and develop business continuity plans.

Module 3

Build a risk-aware culture

Integrate risk management with strategy through governance frameworks aligned to industry standards.

1:1 coaching · optional add-on

Build with 1:1 coaching from industry experts.

A dedicated coach from your target domain: someone who has done the job, hired for it, and knows exactly what it takes.

Book a demo session
  • A coach matched to your goal in 24 hours
  • A written roadmap you keep
  • Weekly sessions for as long as you want them

60-minute demo session · 100% refundable · no obligation to continue

Your risk register reviewed

Feedback on how you score, prioritize and record risks.

Frameworks made practical

How ISO 31000 and NIST translate into the work you actually do.

A plan for your timeline

A study and practice plan that fits around your job.

Aim it at a role

Which security and risk roles fit you, and what to learn next.

2,000+Industry coaches
16Domains covered
4.8/5Average coach rating
48,000+Sessions delivered
04 Syllabus

Three modules, from risk sources to risk culture.

About 9 hours end to end, fully self-paced. Every module lists its learning objectives, its content, and what you'll walk out with.

27 videos 9 readings 12 assignments ≈ 9 hours Download full syllabus
Learning objectives - by the end of this module you can:
  • Define the categories of IT risk and their impact on business objectives
  • Apply common risk frameworks such as ISO 31000 and NIST
  • Identify risks with risk registers, matrices and scoring models, and develop risk scenarios
  • Recognize emerging risks from cloud computing, IoT, AI and machine learning
What's inside
9 videos59 min
3 readings30 min
4 assignments75 min
1 plugin5 min
Topics covered
IT risk categories Business impact ISO 31000 & NIST Risk registers Business processes Risk scenarios Cloud computing risk AI & ML vulnerabilities Threat landscape
You'll leave with: a clear picture of where IT risk comes from, and the tools to identify and record it.
Learning objectives - by the end of this module you can:
  • Conduct risk assessments using qualitative and quantitative methods
  • Measure impact and likelihood, and set risk appetite and tolerance
  • Prioritize risks in line with business goals
  • Implement risk controls with continuous monitoring and improvement
What's inside
9 videos75 min
3 readings30 min
4 assignments75 min
Topics covered
Qualitative analysis Quantitative analysis Assessment tools Case studies Impact & likelihood Risk appetite & tolerance Risk controls Continuous monitoring Process improvement
You'll leave with: a repeatable way to assess, score and prioritize risks - and keep them under review.
Learning objectives - by the end of this module you can:
  • Choose risk responses - avoidance, transfer and mitigation - using cost-benefit analysis
  • Develop business continuity and disaster recovery plans
  • Build organizational resilience and apply crisis management techniques
  • Foster a risk-aware culture with governance aligned to industry standards
What's inside
9 videos69 min
3 readings30 min
4 assignments75 min
Topics covered
Risk response strategies Cost-benefit analysis Risk & strategy Business continuity Disaster recovery Organizational resilience Crisis management Risk-aware culture Governance frameworks
You'll leave with: a mitigation and continuity plan, and the governance to keep risk part of strategy.
05 Tools & skills

The frameworks you work with, and the skills you leave with.

The frameworks and techniques the lessons use, module by module.

Module 1

ISO 31000 & NIST

The common risk frameworks the course uses to structure how risk is identified and managed.

Module 1

Risk registers & matrices

Registers, matrices and scoring models for identifying, recording and comparing risks.

Module 2

Qualitative & quantitative analysis

Measuring impact and likelihood, risk appetite and tolerance, and prioritizing by business goals.

Module 3

Continuity & governance

Business continuity and disaster recovery planning, crisis management and governance frameworks.

Skills you leave with

The eleven skills Coursera lists for this course, grouped the way the work splits - understanding risk, analysing it, and keeping the business running.

Cyber risk

Where risk comes from in IT.

  • Cybersecurity
  • Cyber Risk
  • Information Technology
  • Emerging Technologies

Risk analysis

Measuring and deciding.

  • Risk Analysis
  • Risk Management
  • Risk Management Framework
  • Risk Mitigation

Resilience

Keeping the business running.

  • Business Continuity
  • Business Continuity Planning
  • Crisis Management
Certificate

Proof you can link to.

Finish the graded work and Board Infinity issues a certificate through Coursera - with a public verification link and a one-click path onto your LinkedIn profile.

A Board Infinity course certificate issued through Coursera. It is not a Cisco, ISO or NIST certification. Counts toward the Cybersecurity Fundamentals with Cisco Tools specialization certificate.

On your profile in one click

Add it to your LinkedIn profile, resume or CV, where recruiters actually look.

Anyone can verify it

Its own verification link, so a hiring manager confirms it in seconds.

Earned, not attended

Awarded on a graded quiz in each of the three modules - it certifies what you can do.

Two names on it

Board Infinity as the provider, Coursera as the platform.

06 Career impact

Every security decision is a risk decision. These roles make them.

Role areas where these skills are used. They're directions, not guaranteed outcomes.

Where these skills count

Cybersecurity Analyst

Turn threats and vulnerabilities into prioritized risks for the business.

IT Risk Analyst

Run assessments, maintain the risk register and track treatment plans.

GRC Analyst

Governance, risk and compliance work built on frameworks like ISO 31000 and NIST.

Information Security Manager

Set risk appetite, choose controls and report risk to leadership.

Risk Manager

Align risk priorities with business goals using cost-benefit analysis.

Business Continuity Planner

Build continuity, disaster recovery and crisis management plans.

IT Auditor

Review whether controls and monitoring actually reduce the risks they target.

Compliance Officer

Keep governance aligned with industry standards and regulation.

The honest comparison

What you're actually paying for

Every topic in this course exists free somewhere - a framework PDF, a blog on risk matrices, a template register. What a course adds is the order you learn it in, the practice that makes it stick, and something to show at the end.

What you get
This course
DIY with free content
A sequenced pathIdentify → assess → mitigate
3 modules that build on each other
Framework documents with no order
Practice with feedbackLearning that sticks
12 practice and graded quizzes
Read, forget, reread
Real-world contextNot just definitions
Case studies and business-aligned prioritization
Generic checklists
Expert-built contentIndustry knowledge and practice
Board Infinity's industry experts
Comment-section guesswork
Proof for recruitersVerifiable, on LinkedIn
Certificate with verification link
Nothing to show
07 The bigger path

More from the Cybersecurity Fundamentals with Cisco Tools specialization.

This course stands on its own - but it's also the second step of a three-course path. Enrolling automatically enrolls you in the specialization.

Course 1

Understanding Cisco Cybersecurity Operations Fundamentals

The CIA triad, SIEM and log analysis, and host and network security with firewalls and IDS/IPS.

≈ 11 hours
View course
You're here Course 2

Risk Assessment and Management in Cybersecurity

IT risk, qualitative and quantitative assessment, mitigation and business continuity.

≈ 9 hours · 3 modules
Back to top
Course 3

Advanced Cybersecurity Risk Management

ISO, NIST and COBIT frameworks, incident response strategy, and integrated risk management plans.

≈ 10 hours
View course
Related courses from Board Infinity
Go threat-focused

AI for Cybersecurity: Threat Detection & Incident Response

Use AI to detect threats and respond to incidents - the operational side of the risks you assess here.

View course Go governance

AI Risk and Compliance: Audit and Governance Foundations

Apply risk and governance thinking to AI systems - audit, compliance and controls.

View course Go hands-on

AI Phishing Detection: Build a Machine Learning System

Build a control for one of the most common cyber risks - phishing - with machine learning.

View course

Board Infinity runs 270+ courses and 57 specializations on Coursera - browse the full catalogue.

Know exactly what you're signing up for.

3 modules · 27 lessons · 12 assignments · free PDF

08 FAQ

Common questions

Everything learners ask before enrolling, answered plainly.

About the course

How to identify, evaluate and manage IT risks in line with business goals. Module one covers IT risk categories, frameworks like ISO 31000 and NIST, risk identification and emerging risks from cloud, IoT and AI. Module two covers qualitative and quantitative risk assessment and prioritization. Module three covers mitigation strategies, business continuity, and risk culture and governance.

Coursera describes it as suited to IT professionals, cybersecurity analysts and business leaders who want to safeguard their organization. It's an intermediate course.

About 9 hours in total - three modules of about 3 hours each, with 27 video lessons, 9 readings and 12 assignments. It's self-paced, so you can spread it over as long as you need.

Each module has three practice quizzes and a graded quiz - 12 assignments in all.

The current enrollment options and price for your region are shown on the Coursera course page. The course is included with a Coursera Plus subscription, and Coursera's financial aid is available for eligible learners.

Yes - this page is Board Infinity's own overview of our course. Enrollment, payment, video lessons, grading and the certificate all happen on Coursera.

Career & certificate

Yes. Completing the graded work earns you a shareable certificate from Board Infinity, issued through Coursera with its own verification link. You can add it to your LinkedIn profile, resume or CV.

No. It's a Board Infinity course certificate issued through Coursera. The course is an independent educational resource and isn't affiliated with, endorsed by or official preparation material of Cisco Systems Inc.

Cybersecurity analysts, IT risk and GRC analysts, information security managers, risk managers, business continuity planners, IT auditors and compliance officers all work with risk assessment and mitigation day to day.

The other two courses of the specialization: Understanding Cisco Cybersecurity Operations Fundamentals (~11 hours) and Advanced Cybersecurity Risk Management (~10 hours).

No. Board Infinity 1:1 coaching is a separate, optional add-on. Enrollment, lessons, grading and the certificate all happen on Coursera.

Want someone guiding your risk work?

Board Infinity 1:1 coaching pairs you with a practitioner while you take the course.

See 1:1 coaching

Know your risks before they find you.

Three modules. Nine hours. Identify, assess and mitigate IT risk - and a certificate to show for it.

Enroll on Coursera

Risk Assessment and Management in Cybersecurity · by Board Infinity · offered on Coursera

Risk Assessment & Management Enroll