Effective risk identification and risk management are not just best practices for organisations; they are obligations under GDPR and the Data Protection Act 2018 to demonstrate accountability, ensure data security and safeguard data subjects’ rights.
A robust risk management process helps identify vulnerabilities, reduces the likelihood of data breaches, helps complete DPIAs and provides evidence of GDPR compliance. Unfortunately, the GDPR is silent on how organisations should assess and quantify risk, which means information governance professionals have to consider generic guidance from other sectors.In this workshop you will gain critical insights and practical tools to identify, assess, and mitigate information risks in your organisation. Designed for information governance professionals, it delivers actionable strategies, real-world examples, and expert guidance to strengthen your risk posture and support compliance.
By the end of the workshop, you will be able to map information assets, threats, and vulnerabilities to assess real-world risks, produce a risk register tailored to your organisation, make informed decisions on mitigating or accepting specific risks and begin embedding a risk aware approach in daily operations, projects, and strategic planning.
Key Topics
- The role of risk management in data protection compliance
- Key frameworks (ISO 27005, NIST RMF, FAIR)
- Identifying and assessing risks
- The 5 risk management steps
- Identifying threats and vulnerabilities
- Assessing severity and likelihood of risk
- Risk response strategies
- Selecting effective controls
- Applying a risk matrix
- Identifying risk appetite
- Planning and implementing controls
- Risk reporting and culture
Event Information
| Event Date | 15-09-2026 10:00 am |
| Individual Price | From £449 plus VAT |
| Location | Online (live) |
17-08-2026 10:00 am
Online (live)
20-08-2026 10:00 am
Online (live)
01-09-2026
London
07-09-2026
Online (live)
Register for event alerts
On demand webinars
Sharpe Five Podcast - Episode 1: Understanding Access Injunctions
In this episode, Sharpe Pritchard and Five Paper explore what access injunctions are, why they are used, and the circumstances in which courts may grant them.
The A to Z of Housing Discrimination Case Law: R (FG) v Kensington and Chelsea
Iris Ferber KC and Carolina Bax cover a case which answers some fundamental questions in reasonable adjustments claims relating to housing.
Placements of children in Scotland – implementation of the new law
Justin Gray delivers a pre-recorded webinar covering the latest position in cross-border placements of children in Scotland.
The End of the Acid Test: What Every Advocate and Health & Social Care Professional Needs to Know
Peter Edwards of Peter Edwards Law explores the Supreme Court's decision to abolish the 'Acid Test'.
AI Can See Clearly Now 2026
Jennifer Thelen, Saara Idelbi and Nyasha Weinberg host a pre-recorded webinar on AI Generated Legal Correspondence.
Worth Your Data in Gold
Jennifer Thelen, Philip Dayle and Steph David offer practical solutions to pleading and quantum in data protection claims.
Climate Law Matters: Live
Steph David, Christopher Moss and Ella Grodzinski discuss recent developments in climate law across different sectors and consider emerging patterns that are likely to shape litigation later in the year.
Turning Tensions into Trust: A New Mediatory Approach to Party Walls, Rights of Light and other Neighbour Conflicts
John Pugh-Smith, Celina Colquhoun and Niraj Modha discuss the practical deployment of mediation techniques.










