Re: Risk Management primer

[Colin Glover <colin.glover () SERA-BRYNN COM>]

Hi,

Because they are out and available I point folks towards the NIST Publications, specifically 800-30, Risk Management 
Guide for Information Technology Systems and 800-30 rev 1, Guide for Conducting Risk Assessments.

Thanks
Colin


From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Menne, Michael S
Sent: Tuesday, July 30, 2019 11:14 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Risk Management primer

Hello all,
Does anyone have any resources for an Information Security Risk Management primer?  I'm not looking for anything 
complex or an official training course at this point. I'm looking for something simple and basic that I can train the 
rest of our IT staff on.

Thanks

Michael Menne, CISSP
Chief Information Security Officer
IT Solutions Information Security
Minnesota State University, Mankato
Phone:  (507) 389-5705
www.mnsu.edu/its/security<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.mnsu.edu%2Fits%2Fsecurity&data=02%7C01%7Cmichael.menne%40mnsu.edu%7Cc3f4cd9ab99f4649715b08d711fdf18b%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C636997654686922241&sdata=NzHU9kDya1V9tYgnABc4v7zjESJZYry6TOWstB%2FZSZs%3D&reserved=0>

[signature_2008603909]

Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended 
recipient(s) and may contain confidential and privileged information.  Any unauthorized review, use, disclosure or 
distribution is prohibited.  If you are not the intended recipient, please contact the sender by reply e-mail and 
destroy all copies of the original message.

CONFIDENTIALTY NOTICE: This email and any attachment(s) contain confidential, privileged and/or proprietary information 
of Sera-Brynn, LLC. Do not copy or distribute without prior written consent. If you are not a named recipient to the 
message, please notify the sender immediately and do not retain the message in any form, printed or electronic.