IT managers reviewing a risk matrix and system controls during a technology governance meeting

IT Risk Management

Build capabilities to identify, assess, prioritize, and treat IT risks; design controls, monitor risk levels, and maintain periodic risk governance activities.

1Course Overview

IT Risk Management is essential to protecting and maintaining the stability of enterprise information systems. Identifying, assessing, and managing potential risks helps prevent incidents that can disrupt business operations, cause data loss, or create financial damage. An effective IT risk management system protects sensitive information while supporting compliance with legal requirements and security standards. By managing risk proactively, organizations can reduce negative impacts, improve incident resilience, and maintain the confidence of customers and stakeholders.

These capabilities support sustainable development and strengthen competitive advantage. Infochief Academy’s “IT Risk Management” course provides managers, business leaders, and IT professionals with core knowledge for identifying, assessing, and treating risks across information systems.

The course equips learners with the skills required to develop and implement effective risk management strategies that protect enterprise data and assets. Learners apply practical risk management methods and tools, strengthen rapid incident response, improve awareness of information security and legal compliance, and establish a solid foundation for safe and stable IT operations.

Duration2 days / 4 sessions

Delivery FormatIn-house

LevelIT Risk Management

CertificationIT Risk Management

2Training Objectives

Apply structured knowledge and methods to manage enterprise IT risk.
Plan and conduct periodic IT risk assessment and management activities within the enterprise IT organization.
Identify significant risks to IT assets and recommend corrective plans to reduce those risks.
Prioritize risk reduction activities and define timelines for implementing IT risk treatments.
Develop and maintain an annual register of IT risk indicators at acceptable levels.
Follow IT audit standards established by the company’s internal control function.
Develop IT risk assessment reports with recommendations for managing identified risks.
Maintain clear and complete IT risk and security assessment documentation.
Develop a detailed IT Risk Management project plan.
Strengthen individual capability and create added value for the organization.

3Target Participants

i. Internal Audit / Internal Control Professionals

ii. Senior IT Managers

iii. Heads / Deputy Heads of IT (IT Managers)

iv. IT Supervisors responsible for system operations

v. IT Infrastructure Administrators

vi. IT Team Leaders

vii. Executive management and corporate leadership teams

4Course Content

Part 1:What Is IT Risk?

The IT risk story
Risk and overall IT system architecture
IT risk statistics and reports
Nature of IT risk
Components of IT risk
IT risk classification (C/I/A)
IT controls (hard / soft)
Risk management principles

Part 2:IT Risk Management Procedure – Build the IT Asset Inventory

Build the IT asset inventory
Identify vulnerabilities and weaknesses
Identify threats
Identify risk types
Determine asset impact scope / criticality
Analyze likelihood / probability of risk occurrence
Calculate IT risk level / potential loss
Recommend treatment options / optimal solutions
Assign accountable owners
Practice IT Risk Management

Part 3:Designing IT Risk Controls

Two approaches to control design
Control design steps
Control strength
Common control types
Control tools
Control analysis and selection template
Controls at organizational, process, and activity levels
Primary and secondary controls
Controls classified by function
Manual and automated controls
Hard and soft controls
Practice: Designing IT Risk Controls

Part 4:Risk Management Standards Across IT Systems

IT human resource governance
IT Asset Management
IT Infrastructure Management
IT procurement and tendering process management
Vendor relationship management
Information system operations
Ensure information system security, safety, and confidentiality
Develop, implement, and maintain application systems
Develop, implement, and administer databases
Operate, manage, and use network systems
Administer system software and operating systems
Maintain and manage business applications
IT Project Management
IT Service Management
Business/IT continuity management
Disaster Recovery Planning
Practice: identify IT risks and corresponding treatments
Appendix: Templates & sample examples

5Training Methodology

30% theory – 70% practice. The instructor presents the knowledge framework concisely, followed by discussions, case studies, self-assessments, scenario-based exercises, and action planning to strengthen workplace application.

6Class Information & Enrollment

In-house Training

Duration	Class Size	Tuition Fee
2 days / 4 sessions	Up to 35 learners/class	VND 48,500,000 / class conducted at the organization’s factory or office.

Other costs (if applicable): Depending on the training location, the instructor’s travel and accommodation expenses may be charged separately.

Request In-house Consultation →

7Learning Materials & Certification

Infochief Course Materials

Vietnamese course materials for each module, English reference materials, and sample practical exercises.

IT Templates & Toolkits

Forms, Checklists, Templates, Scorecards, Procedures, Flowcharts, Guidance, Samples, Rules, Policies, Questionnaires, Assessments, and Comparison Charts.

Explore the Toolkits →

IT Risk Management

Learners who complete the full program and final course requirements will receive an “IT Risk Management” certificate from Infochief Academy.

Certification Information →

8Learner Testimonials

Võ Thanh UyIT Manager · PNJ

The course materials combine international standards with the Vietnamese business context; the instructor’s experience and supporting toolkits help improve practical management effectiveness.”

Lê Nguyễn Thanh Hai - Infochief Academy learner

Lê Nguyễn Thanh HaiIT Manager · PV Trans

The systematic management content, together with toolkits, processes, and templates, gives learners a stronger foundation for implementing IT plans professionally.”

Lương KhánhIT Deputy Manager · OCB

The modules closely reflect the needs of IT managers; discussions, practical cases, and the final project strengthen workplace application.”

Nguyễn Thanh Hiền - Infochief Academy learner

Nguyễn Thanh HiềnIT Manager · VNPT Long An

The program provides a comprehensive view of IT management, from planning and implementation through evaluation and development of an organizational investment roadmap.”

View More Learner Testimonials →