Foundations of IT Risk & Governance

This course provides a foundational introduction to IT risk, governance, and control concepts used in modern audit, risk, and consulting environments. Students will explore the core principles of IT risk, including common risk types, the relationship between IT risk and business risk, and the use of the threat–vulnerability–impact model to assess and communicate risk. The course also examines key control categories, risk appetite and tolerance, and the practical application of governance and service management frameworks such as COBIT 2019 and ITIL 4. Through lessons, worked examples, guided exercises, and hands-on labs, learners will develop the ability to identify and classify IT risks, assess control gaps, build risk registers, map risks to governance objectives, and document findings in a professional IT audit and controls context.