Training Services

⁠⁠⁠Requirements

The Department of Finance (Finance) has identified a requirement to provide IT Risk Fundamental training to APS Officials within the ICT Division who are: new to ICT, new to Finance, or are less familiar with detecting and managing IT Risk. Finance is undertaking the current procurement to enter an arrangement with a training provider (Supplier) for the provision of:

IT Risk Fundamental’s Facilitated Training. Course content should include:

• Explain the basic terms and concepts of Risk Management as it applies to I&T risk
• Describe the purpose, objectives, and importance of risk governance and risk management
• Summarise the risk management process and workflow
• Describe the relationship between assets, risk factors, threats, and vulnerabilities
• Describe the use and benefits of risk scenarios
• Explain the process and methods used to complete risk identification
• Describe elements and steps necessary to complete risk assessment and analysis
• Detail the risk response process and options available
• Outline the importance of an ongoing risk monitoring process and a proactive and continuous
• approach to risk management