Business services and cyber risk

This module connects a business-service outcome to the assets, data, people and suppliers that enable it, then converts that understanding into reviewable risk scenarios. Learners map dependency direction, estimate time-based business impact, build a purpose-bounded threat model, and verify that each scenario states cause, event and consequence rather than a list of concerns. They also apply treatment and exception choices with an owner, expiry and exit indicator. The outputs are a service map, impact analysis, risk register and treatment decision that a service owner can review without false precision or unauthorized risk acceptance.

Read the whole first subject without an account: its lessons, summary and review questions.