Skip to main content
International Fees

International fees are typically three times the amount of domestic fees. Exact cost will be calculated upon completion of registration.

Course details

​All organizations rely on technology to deliver their core services and to achieve their business goals. As these organizations embrace digitization, they expose previously sensitive personal and corporate data to the risk of service interruptions, data loss and cyber-attacks. Senior executives look to technology leaders to provide risk based strategies to protect these data assets as well as to provide resiliency for business services. Protection of critical infrastructure and systems, data classification and compliance to legislation, standards and privacy laws are mandatory for organizations to thrive in the digital economy. This course provides a structured approach to adopting risk management disciplines and practices for organizations. Students will learn to identify vulnerabilities, threats and risks to the organization and specifically to information systems. Industry practice methods of risk assessment, risk mitigation as well as business impact analysis, business continuity, disaster recovery and incident response are the core learning outcomes from this course. The successful student will take away a clear understanding of risk management and a toolkit of practical approaches that can be applied to any organization.




Not offered this term
This course is not offered this term. Please check back next term or subscribe to receive notifications of future course offerings and other opportunities to learn more about this course and related programs.

Learning Outcomes

Upon successful completion of this course, the student will be able to:

  • Analyze threats, vulnerabilities and exploits as part of a holistic risk management plan
  • Compare and contrast industry standard risk assessment practices
  • Compare and contrasts industry standard risk mitigation and approaches
  • Implement risk assessment and risk mitigation practices to business and industry use cases
  • Use business impact assessments, business continuity planning and disaster recovery planning best practices
  • Evaluate and recommend administrative, technical and physical security controls
  • Interpret and apply knowledge of laws, standards, investigations and privacy to propose appropriate security controls for information systems
  • Conduct a multi-disciplinary research study in a specific area of information, network and cybersecurity
  • Develop and implement an Incident Response plan for business continuity and cybersecurity disruptions

Effective as of Winter 2020

Related Programs

IT Risk Management (TMGT 7156) is offered as a part of the following programs:

School of Construction and the Environment

  1. Geographic Information Systems
    Advanced Diploma Part-time
  2. Geographic Information Systems
    Bachelor of Technology Full-time/Part-time


Interested in being notified about future offerings of IT Risk Management (TMGT 7156)? If so, fill out the information below and we'll notify you by email when courses for each new term are displayed here.

  • Privacy Notice: The information you provide will be used to respond your request for BCIT course information and is collected under Section 26(c) of the Freedom of Information and Protection of Privacy Act (FIPPA). For more information about BCIT’s privacy practices contact: Associate Director, Privacy, Information Access & Policy Management, British Columbia Institute of Technology, 3700 Willingdon Ave. Burnaby, BC V5A 3H2, email: