From July 12, 2022 to August 30, 2022, an on-line course on "Security Audit and Risk Management" (hereinafter the course) was posted for Ukrainian professionals under the patronage of USAID/ISACA. The course was presented to the tutors of the Kharkiv National University of Radioelectronics (KNURE), as well. On the part of the V.V. Popovskyy Department of Infocommunication Engineering of KNURE the courses were attended, successfully tested, and received USAID/ISACA certificates by Associate Professors Tereschenko I.V., Shtanhei S.V..Course lecturer: CRISK, CDPSE, CISA Trainer, owner&CEO of LLC UAG - Anastasia Konopleva.
Currently, national IT security management is facing threats on an unprecedented scale and with consequences caused by a barbaric military invasion by an aggressor country, the russian federation. On this background, the course modules considered significant changes in the cause-and-effect chains of management decision-making and support in terms of the risks of disruptive influences from the aggressor. These examples of possible risk analysis and response of IT management to threats provide valuable demand for cyber defense planning and recovery.

Effective implementation of the approaches outlined in the course in practice depends on the level of management and the appropriate management structure. In this regard, the course material was taught from the positions of the process approach (process thinking) and risk-oriented management decision-making, recommended in the standards ISO 9001:2008, 2015; ISO 31000: 2018 and document ISO/TC 176/SC 2/N 544R3. Each of the modules outlined also constituted an approach known as the E. Deming cycle: PDCA (Plan-Do-Check-Act).
Consequently, the courses proved that conscious management must create and maintain an internal corporate governance environment in which auditing and security risk management exist as a qualified professional activity. Risk management is organically woven into every element of the value creation process. Management must create and refine management mechanisms to achieve the organization's goals under the influence of good practices that are almost continuously shaped as a conscious demand of the external environment.

It should be noted that the elements of the course are appropriate in the preparation of applicants for higher education in the specialty "Cybersecurity" in the educational and professional training programs for Bachelors - "Information Security Management" and Masters - "Administrative Management in the field of Information Security".
Sincere gratitude to course lecturer Anastasia Konopleva for her hard work and time spent on careful professional preparation of the material and accessible interpretation of the complex content of the course.

With respect and wishes for success, of V.V. Popovskyy Department of Infocommunication Engineering of KNURE, Assoc. Prof., Ph.D. in Technology Tereschenko I.V.
09.09.2022