F5 · 1 day (workshop)

Risk analysis with the EBIOS RM method

This one-day workshop gives CISOs and GRC consultants mastery of the five workshops of ANSSI's EBIOS Risk Manager method, and the reflexes to facilitate a workshop with non-technical business stakeholders.

What this course covers

Situating the EBIOS RM method (ANSSI) within the risk analysis approach

Running the five workshops of the method

Facilitating a workshop with non-technical business stakeholders

Documenting an analysis defensible in front of an executive committee

Detailed program

Program of the day

1The five workshops of the EBIOS RM method

2Framing and security baseline (Workshop 1)

3Risk sources and strategic scenarios (Workshops 2 and 3)

4Operational scenarios and risk treatment (Workshops 4 and 5)

5Practical exercise: running an EBIOS RM workshop

6Case study: a disagreement between business and IT on a scenario's likelihood

Flagship product

AuditForge

Automated orchestration of security audits and multi-framework compliance

AuditForge orchestrates your open-source technical tools (network, application, cloud scans) while guaranteeing rigorous traceability between detected vulnerabilities and business risks. The solution serves consulting firms as well as internal security leaders, on a secure and sovereign architecture, with progressive feature rollout.

8 business modules: mapping, compliance, vulnerabilities, risks & SoA, GDPR, reporting, client portal
6 integrated frameworks: ISO 27001/27002, PCI-DSS 4.0.1, GDPR, CIS Controls v8.1, NIST CSF 2.0
Risks & SoA module, to extend the EBIOS RM analysis into a living register
Sovereign architecture, strict data isolation per firm

Discover AuditForge

Materials provided to participants

Detailed program, course deck, case studies and workshop guide are provided to every registered participant, ahead of and during the course.

Detailed program (PDF)

Course deck (PPTX)

Case studies (PDF)

Full participant handbook (PDF)

A question about this course?

Talk to us