Effective risk identification and risk management are not just best practices for organisations; they are obligations under GDPR and the Data Protection Act 2018 to demonstrate accountability, ensure data security and safeguard data subjects’ rights.
A robust risk management process helps identify vulnerabilities, reduces the likelihood of data breaches, helps complete DPIAs and provides evidence of GDPR compliance. Unfortunately, the GDPR is silent on how organisations should assess and quantify risk, which means information governance professionals have to consider generic guidance from other sectors.In this workshop you will gain critical insights and practical tools to identify, assess, and mitigate information risks in your organisation. Designed for information governance professionals, it delivers actionable strategies, real-world examples, and expert guidance to strengthen your risk posture and support compliance.
By the end of the workshop, you will be able to map information assets, threats, and vulnerabilities to assess real-world risks, produce a risk register tailored to your organisation, make informed decisions on mitigating or accepting specific risks and begin embedding a risk aware approach in daily operations, projects, and strategic planning.
Key Topics
- The role of risk management in data protection compliance
- Key frameworks (ISO 27005, NIST RMF, FAIR)
- Identifying and assessing risks
- The 5 risk management steps
- Identifying threats and vulnerabilities
- Assessing severity and likelihood of risk
- Risk response strategies
- Selecting effective controls
- Applying a risk matrix
- Identifying risk appetite
- Planning and implementing controls
- Risk reporting and culture
Event Information
| Event Date | 13-07-2026 10:00 am |
| Individual Price | From £449 plus VAT |
| Location | Online (live) |
27-07-2026 5:00 pm
Online (live)
28-07-2026
Online (live)
31-07-2026 10:00 am
Online (live)
05-08-2026 10:00 am
Online (live)
17-08-2026 10:00 am
Online (live)
20-08-2026 10:00 am
Online (live)
Register for event alerts
On demand webinars
The End of the Acid Test: What Every Advocate and Health & Social Care Professional Needs to Know
Peter Edwards of Peter Edwards Law explores the Supreme Court's decision to abolish the 'Acid Test'.
AI Can See Clearly Now 2026
Jennifer Thelen, Saara Idelbi and Nyasha Weinberg host a pre-recorded webinar on AI Generated Legal Correspondence.
Worth Your Data in Gold
Jennifer Thelen, Philip Dayle and Steph David offer practical solutions to pleading and quantum in data protection claims.
Climate Law Matters: Live
39 Essex Chambers discussed recent developments in climate law, crossing multiple sectors.
Turning Tensions into Trust: A New Mediatory Approach to Party Walls, Rights of Light and other Neighbour Conflicts
John Pugh-Smith, Celina Colquhoun and Niraj Modha discuss the practical deployment of mediation techniques.
Supreme Court judgment: After Cheshire West – Transitions from Care to COP
Jacqueline Thomas KC and Chloe Lee examine how the Supreme Court’s judgment affects cases involving children coming before the courts.
Supreme Court judgment: Beyond Cheshire West
A webinar examining the Supreme Court’s decision in ‘A Reference by the Attorney General for Northern Ireland’.
Forfeiture mini series: Re-entry, Re-let and Relief
Michael Grant and Anne Hogarth explore the process of a landlord forfeiting a lease, re-letting the property, and the former tenant seeking relief.









