Certified Data Centre Risk Professional (CDRP®) - eLearning (exam included)

Certified Data Centre Risk Professional (CDRP®) - eLearning (exam included)

Protect your organisation from costly downtime and operational disruptions with the Certified Data Centre Risk Professional (CDRP®) course. This internationally accredited certification provides a practical framework for identifying, assessing, and managing risks across mission-critical data centre environments.

You'll learn how to apply globally recognised risk management standards and methodologies to evaluate threats, vulnerabilities, and business impacts. From infrastructure and facilities to IT services and operational processes, CDRP® equips you with the knowledge to develop effective risk treatment plans, improve resilience, support compliance, and make informed investment decisions that strengthen business continuity.

Key Features

• Course material available in English 
• Intermediate level for aspiring professionals
• Presentation & E-book included
• 20+ hours recommended study time 
• 1 Year access to the learning platform & exam voucher (included together)
• Program completion certification included

Learning Outcomes

• Apply internationally recognised risk management standards and methodologies.
• Identify threats, vulnerabilities, and critical business assets.
• Perform qualitative and quantitative risk assessments.
• Evaluate the business impact and cost of data centre downtime.
• Develop practical risk treatment and mitigation strategies.
• Monitor, review, and continuously improve risk management processes.
• Support regulatory compliance and ISO/IEC 27001 certification initiatives.
• Strengthen organisational resilience and business continuity

Target Audience

• Data centre managers
• Data centre operations and facilities managers
• IT managers and infrastructure professionals
• Information security managers
• Security professionals
• Risk managers and auditors
• IT governance and compliance professionals
• Anyone responsible for improving the availability, resilience, and risk posture of data centre operations

Prerequisites

• There are no mandatory prerequisites for attending this course.
• However, participants with at least three years of experience in data centres or IT infrastructure environments will gain the greatest benefit. Prior completion of the Certified Data Centre Professional (CDCP®) course or equivalent knowledge is recommended but not required

Course Content

Introduction to Risk Management

• Risk management concepts
• Senior management and risk
• Enterprise Risk Management (ERM)
• Benefits of risk management

Data Centre Risk and Impact

• Risk in facility, power, cooling, fire suppression, infrastructure and IT services
• Impact of data centre downtime
• Main causes of downtime
• Cost factors in downtime

Standards, Guidelines and Methodologies

• ISO/IEC 27001:2013, ISO/IEC 27005:2011, ISO/IEC 27002:2013
• NIST SP 800-30
• ISO/IEC 31000:2009
• SS507:2008
• ANSI/TIA-942
• Other methodologies (CRAMM, EBIOS, OCTAVE, etc.)

Risk Management Definitions

• Asset
• Availability/Confidentiality/Integrity
• Control
• Information processing facility
• Information security
• Policy
• Risk
• Risk analysis/Risk assessment/Risk evaluation/
• Risk treatment
• Threat/Vulnerability
• Types of risk

Risk Assessment Software

• The need for software
• Automation
• Considerations

Risk Management Process

• The risk management process
• Establishing the context
• Identification
• Analysis
• Evaluation
• Treatment
• Communication and consultation
• Monitoring and review

Project Approach

• Project management principles
• Project management methods
• Scope
• Time
• Cost
• Cost estimate methods

Context Establishment

• General considerations
• Risk evaluation, impact and acceptance criteria
• Severity rating of impact
• Occurrence rating of probability
• Scope and boundaries
• Scope constraints
• Roles & responsibilities
• Training, awareness and competence

Risk Assessment - Identification

• The risk assessment process
• Identification of assets
• Identification of threats
• Identification of existing controls
• Identification of vulnerabilities
• Identification of consequences
• Hands-on exercise: Identification of assets, threats, existing controls, vulnerabilities and consequences

Risk Assessment - Analysis and Evaluation

• Risk estimation
• Risk estimation methodologies
• Assessment of consequences
• Assessment of incident likelihood
• Level of risk estimation
• Risk evaluation
• Hands-on exercise: Assessment of consequences,
• probability and estimating level of risk

Risk Treatment

• The risk treatment process steps
• Risk Treatment Plan (RTP)
• Risk modification
• Risk retention
• Risk avoidance
• Risk sharing
• Constraints in risk modification
• Control categories
• Control examples
• Cost-benefit analysis
• Control implementation
• Residual risk

Communication

• Effective communication of risk management activities
• Benefits and concerns of communication

Risk Monitoring and Review

• Ongoing monitoring and review
• Criteria for review

Risk scenarios

• Risk assessment approach
• Data centre site selection
• Data centre facility
• Cloud computing
• UPS scenarios
• Force majeure
• Organisational shortcomings
• Human failure
• Technical failure
• Deliberate acts

Exam & Certification Details

• Duration: 60 minutes

• Questions: 40 multiple-choice questions

• Exam Type: Closed book

• Pass Mark: 27 correct answers (68%)

Certification

Candidates who successfully pass the exam will receive the official Certified Data Centre Risk Professional (CDRP®) certificate.

The certification is accredited by EXIN, a globally recognised independent certification body, and is valid for three years, after which recertification is required.

FAQ

What is CDRP®?

CDRP® (Certified Data Centre Risk Professional) is an internationally recognised certification that teaches professionals how to identify, assess, mitigate, and manage risks affecting data centre facilities, infrastructure, and operations using globally recognised risk management frameworks.

What standards and frameworks are covered?

The course is based on internationally recognised standards and guidelines, including:

• ISO/IEC 27001
• ISO/IEC 27005
• ISO 31000
• NIST SP 800-30
• ANSI/TIA-942
• Other recognised risk assessment methodologies such as CRAMM, EBIOS, and OCTAVE.

Is prior risk management experience required?

No. There are no formal prerequisites. However, professionals with several years of experience in data centre or IT infrastructure environments will benefit the most, and prior CDCP® knowledge is recommended.

Is CDRP® internationally recognised?

Yes. CDRP® is accredited by EXIN, an internationally recognised independent certification and examination institute. It is recognised globally and demonstrates expertise in managing risks within mission-critical data centre environments.