Contingency planning

be able to justify the goals and various key terms used in risk management and assess IT risk in business terms. be able to apply both quantitative and qualitative risk management approaches and to compare and contrast the advantages of each approach. be able to critically analyse the various approaches for mitigating security risk, including when to use insurance to transfer IT risk. be able to critically evaluate IT security risks in terms of vulnerabilities targeted by hackers and the benefits of using intrusion detection systems, firewalls and vulnerability scanners to reduce risk.