CDRP - Certified Data Centre Risk Professional

The CDRP® course is designed to expose attendants to the overall risk management process. Focus is on both the data centre infrastructure and the physical data centre facility and equipment; the attendant will learn how to identify and quantify risk in their organization, creating the ability to reduce the risk to a level acceptable for the organization.

Course Overview
Course Content
Exam & Certification
FAQs

About the course

The course is based on international standards (ISO/IEC27001:2005) and guidelines (ISO/IEC27005:2011, NIST800-30, ISO/IEC31000) and will additionally prepare the candidate being able to take part and assist in corporate certification processes that may apply. CDRP® is a must for every organisation that wants to manage their risk without over spending.

Pre-requisites

There is no specific prerequisite for the CDRP® course. However, participants who have at least three years' experience in a data centre and/or IT infrastructures will be best suited. This experience may come from a business or IT background where the participant has knowledge of both environments, and understands the mission of their organisation. Attendance of CDCP® is beneficial but not a requirement.

Course Benefits

After completion of the course the participant will be able to:

Understand the different standards and methodologies for risk management and assessment
Establish the required project team for risk management
Perform the risk assessment, identifying current threats, vulnerabilities and the potential impact based on customised threat catalogues
Report on the current risk level of the data centre both quantitative and qualitative
Anticipate and minimise potential financial impacts
Understand the options for handling risk
Continuously monitor and review the status of risk present in the data centre
Reduce the frequency and magnitude of incidents
Detect and respond to events when they occur
Meet regulatory and compliance requirements
Support certification processes such as ISO/IEC 27001
Support overall corporate and IT governance

Course Content

CDRP - Certified Data Centre Risk Professional

Lesson 1: Introduction to Risk Management
- Risk management concepts
- Senior management and risk
- Enterprise Risk Management (ERM)
- Benefits of risk management
Lesson 2: Data Centre Risk and Impact
- Risk in facility, power, cooling, fire suppression, infrastructure and IT services
- Impact of data centre downtime
- Main causes of downtime
- Cost factors in downtime
Lesson 3: Standards, Guidelines and Methodologies
- ISO/IEC 27001:2013, ISO/IEC 27005:2011, ISO/IEC 27002:2013
- NIST SP 800-30
- ISO/IEC 31000:2009
- SS507:2008
- ANSI/TIA-942
- Other methodologies (CRAMM, EBIOS, OCTAVE, etc.)
Lesson 4: Risk Management Definitions
- Asset
- Availability/Confidentiality/Integrity
- Control
- Information processing facility
- Information security
- Policy
- Risk
- Risk analysis/Risk assessment/Risk evaluation/
- Risk treatment
- Threat/Vulnerability
- Types of risk
Lesson 5: Risk Assessment Software
- The need for software
- Automation
- Considerations
Lesson 6: Risk Management Process
- The risk management process
- Establishing the context
- Identification
- Analysis
- Evaluation
- Treatment
- Communication and consultation
- Monitoring and review
Lesson 7: Project Approach
- Project management principles
- Project management methods
- Scope
- Time
- Cost
- Cost estimate methods
Lesson 8: Context Establishment
- General considerations
- Risk evaluation, impact and acceptance criteria
- Severity rating of impact
- Occurrence rating of probability
- Scope and boundaries
- Scope constraints
- Roles & responsibilities
- Training, awareness and competence
Lesson 9: Risk Assessment - Identification
- The risk assessment process
- Identification of assets
- Identification of threats
- Identification of existing controls
- Identification of vulnerabilities
- Identification of consequences
- Hands-on exercise: Identification of assets, threats, existing controls, vulnerabilities and consequences
Lesson 10: Risk Assessment - Analysis and Evaluation
- Risk estimation
- Risk estimation methodologies
- Assessment of consequences
- Assessment of incident likelihood
- Level of risk estimation
- Risk evaluation
- Hands-on exercise: Assessment of consequences,
- probability and estimating level of risk
Lesson 11: Risk Treatment
- The risk treatment process steps
- Risk Treatment Plan (RTP)
- Risk modification
- Risk retention
- Risk avoidance
- Risk sharing
- Constraints in risk modification
- Control categories
- Control examples
- Cost-benefit analysis
- Control implementation
- Residual risk
Lesson 12: Communication
- Effective communication of risk management activities
- Benefits and concerns of communication
Lesson 13: Risk Monitoring and Review
- Ongoing monitoring and review
- Criteria for review
Lesson 14: Risk scenarios
- Risk assessment approach
- Data centre site selection
- Data centre facility
- Cloud computing
- UPS scenarios
- Force majeure
- Organisational shortcomings
- Human failure
- Technical failure
- Deliberate acts

What certification does this course provide?

Exam: Certified Data Centre Risk Professional (CDRP®)

How do I pass the Exam?

Attendees will take a 1 hour CDRP® exam. The exam is 40 questions, closed book and multiple choice based. The passing mark is 27 out of 40.

What is the benefit of this certification?

Attendees passing the exam will be awarded the internationally accredited and recognized 'Certified Data Centre Risk Professional' certificate (CDRP®). CDRP® is globally accredited by EXIN, a fully independent exam and certification institute. The certification is valid for three years after which the student needs to re-certify.

FAQs

Is this course for me?

The primary audience for this course is an IT, Facilities or Data Centre Operations professional working in and around the data centre (representing both end-customers and/or service provider/facilitators) and having responsibility to achieve and improve hi-availability and manageability of the data centre, such as: Data centre managers, Operations / Floor / Facility managers, IT managers, Information security managers, Security professionals, Auditors / Risk Managers / Professionals responsible for IT/corporate governance.
Why study in the data centre sector?

Data centres are at the core of many organisations. Downtime, of applications or the data centre itself, could lead to major direct and indirect losses to the business. This has led many organisations to build resilience at various levels including the data centre infrastructure and the ICT layer. However, the fact is most companies are either overspending or underspending because they do not know the answer to basic questions such as 'what is the cost of downtime' whether per application and/or downtime of the data centre. Without knowing the cost of downtime it would be impossible to determine what level of investment is justied to mitigate the risks of downtime. This has led to many data centres being built to the highest redundancy level dened by the ANSI/TIA-942 standard, whereas from a business perspective a lower redundancy level would have been enough. Risk management is the process of identifying vulnerabilities and associated threats, followed by estimating the level of risk and its impact on the organisation.
How do I enrol in this training?
You can enrol in this training on our website and make an online payment using any of the following option
- Visa Credit or Debit Card
- MasterCard
- American Express
- Diners Club
- PayPal
Once payment is received, you will automatically receive a payment receipt and access information via email.

CDRP - Certified Data Centre Risk Professional