Course description
Physical and information technology (IT) security practitioners within the Government of Canada (GC) must be able to make informed decisions about security by assessing risks and recommending appropriate and cost-effective safeguards. Using Astra, they can record their findings and assess threats against assets to obtain a resulting residual risk in a consistent and repeatable manner.
This self-paced online course aims to train you on how to navigate and use the Astra tool and ensure that you produce can quality Threat Risk Assessments (TRAs).
Each module includes screen captures, videos, and interactive learning activities intended to guide you on using the tool.
There is no mandatory prerequisite for this course. However, you must have experience conducting Harmonized Threat Risk Assessments (HTRA)s prior to taking this training.
Note: Astra is a constantly evolving tool. This course is built using the Version 0.3.0. and will be updated periodically according to the evolution of Astra. You are strongly recommended to consult the user guide which reflects changes in this tool. The user guide will be available once you have completed the course.
Duration
It is estimated that this course takes approximately 2 hours to complete. Please note that you can pause and resume this course at any time.
Delivery method
Self-paced E-learning
Price
Free
Target audience
The target audience of this course is IT professionals who have experience conducting TRAs using the HTRA methodology or ITSG-33. This includes Risk Analyst Practitioners, Risk Assessors Reviewers, and Risk Authorizers.
Prerequisite(s)
None
Course objectives
- recall the purpose and benefits of the Astra tool
- recall how to navigate the Astra tool
- identify the differences between the IT and physical interfaces
- use the Astra tool to conduct a TRA on a system or site
- recall how to create various reports
- identify the residual risks to a site or system using the Astra tool