← Academy Hub
Learning Track · 6 modules

Risk Management Practitioner

Quantitative and qualitative risk management. FAIR, ISO 27005, risk registers, control selection, risk acceptance — how risk actually informs decisions.

Why this track

Quantitative and qualitative risk management. FAIR, ISO 27005, risk registers, control selection, risk acceptance — how risk actually informs decisions. This track walks you from fundamentals through advanced techniques across 6 practitioner modules — the same body of knowledge senior security professionals build over years, structured for self-paced progression with India-specific context throughout.

Prerequisite: See module 1 for entry context. Most modules are self-contained but follow the suggested sequence for best results.
6
Modules
3.8 h
Total time
6
Free modules
Quiz retries
Difficulty mix
Intermediate · 5 Advanced · 1

Module sequence

M1
Risk Management Practitioner
Risk identification, analysis, treatment, monitoring — practitioner-level workflow with FAIR-style quantification, risk register, KRIs, and the link between risk register and security investment.
Intermediate 75 min
M2
Quantitative Risk Analysis with FAIR
Why this module exists. Boards make decisions in money. Heat maps in red, amber, green do not translate to “should we spend ₹2 Cr on this control?” FAIR translates. This module is the operational introduction. The FAIR ontology — the building blocks FAIR decomposes “risk” into measurable components: Loss Event Frequency (LEF) — how often […]
Advanced 35
M3
Qualitative Risk Assessment — ISO 27005 / NIST 800-30 Done Well
Why this module exists. Done well, qualitative risk assessment is cheap, repeatable, and good enough for 90% of decisions. Done badly, it is theatre. The difference is in the scoring rigour, not the framework choice. What ISO 27005 and NIST SP 800-30 actually prescribe Both frameworks define a process: identify assets, identify threats, identify vulnerabilities, […]
Intermediate 30
M4
Building a Risk Register That Drives Decisions
Why this module exists. Every Indian enterprise has a risk register. Few have one anyone uses to decide what to fund. The difference is in the operating model around the register, not the spreadsheet template. This module covers the operating model. What a working risk register actually does Drives the quarterly budget conversation — “what […]
Intermediate 30
M5
Third-Party and Supply-Chain Risk Management
Why this module exists. The threat model has shifted. The hardest perimeter to defend now is your vendors’ perimeter. This module is the practitioner programme: how to tier, assess, monitor, and respond. The tiering — start here Not every vendor needs the same scrutiny. Categorise based on data sensitivity, access level, and operational dependency: Tier […]
Intermediate 30
M6
Risk Treatment — Mitigate, Transfer, Accept, Avoid
Why this module exists. A risk register that produces no closed risks is a registry, not a programme. The treatment lifecycle is what converts identified risk into reduced exposure. This module covers the four options, the decision logic, and the operational mechanics. The four treatment options Option When appropriate Documentation requirement Mitigate Cost-effective control reduces […]
Intermediate 30

Common questions about this track

How long will this track take me? +

Most learners finish in 4-8 weeks at a sustainable 4-5 hours per week. Modules are self-paced so you can move faster or slower as life allows.

Do I need prior experience? +

Module 1 sets the entry baseline. The first module is always free; if it feels approachable, the track is for you.

Will this prepare me for industry certifications? +

Most modules align with the body of knowledge tested by senior security certifications. The Academy is not a cert-prep course but produces working knowledge that transfers to any cert exam in the same domain.

Ready to start?

Begin with Module 1. Work through at your own pace. Free modules require no signup — everything else unlocks with a free RingSafe Academy account.

Start Module 1 → View pricing tiers 🗺️ Explore Skill Map