ISO/IEC 27005: Information Security Risk Management (Udemy.com)

This course is great. It provides a fantastic overview of how risk concepts can be applied to information security and the fact that it is really approachable with 5, 30 minute sections allows for this to be of value even for non-infosec users. Keep up the good work!

The course was very intuitive and straightforward; it's sufficient for acquiring the basics of IT risk management. A more detailed version would be more than welcome, especially considering the instructor's teaching style.

I took an ISO 27001 course before this one and had expected that this course would give me deepened knowledge on information security risk management but it just felt like repetition. Some quizzes would also have been nice, to get to engage a bit and not just sit and watch. Maybe also a few more slides? Being a visual learner, watching a slide with two points for 6-7 minutes straight feels like there could have been a bit more information relayed that way.

It is good as a contact point with the ISO 27005. It explains well the main concepts, considerations, elements, how and when they are applied and the teacher comments on some use cases and examples. I would say this course is good value for money as long as you get the discounted price (10-15 EUR or so) but I could not recommend it for the "original" price (50-60 EUR or so). Although the course is OK, it remains a bit theoretical. After the course you know about the standard and its concepts but still it is difficult to link the knowledge with the tasks that you have to perform as security officer to manage the risks and create the documentation for the managers to authorize a security posture and to accept the residual risks.

Excellent and compact presentation of the topic ISO 27005. Examples of SOA and risk treatment plan documents would be helpful. A more detailed description of residual risks with an example and template would improve the course.

Hasta ahora muy buena experiencia, el ritmo es apropiado, el nivel de detalle como en mi caso que ya estoy más que familiarizado con algunas de las normas de la familia ISO/IEC 27000, es adecuado. Eso si, para quienes no tienen conocimientos previos, se les pude dificultar u obtener un nivel de entendimiento y por ende, de utilidad.

This course is very informative and provides information on the critical areas of ISO 27005. Having more sample templates in some areas, like the Statement of Applicability and Risk Management Plan will be great.

This course was very straightforward and easy to understand. It highlighted the important areas of the risk management framework and I believe I have gained some knowledge that will help in the future.

It would be nice if I could run the audio at 1.25 or 1.5 speed, but htis was not an option. I could not obtain any course completion document at the end of the training

I always like his trainings, even though I am having experience in Risk Management, I always try to purchase his training videos because they are good for brush up minds and boost the knowledge.