Cybersecurity Risk Management for Managers
Overview
Cyber attacks are now a business risk, not only an IT problem. This course helps managers understand the main cyber threats, assess cyber risk in business terms, oversee security controls and incident response, and build a security-aware culture.
Who should attend
Managers, risk and compliance staff, IT managers, and executives responsible for cyber risk.
Training methodology
Interactive presentations, practical exercises, case studies, group discussions, role-plays where relevant, and a personal action plan that participants apply in their own work.
Objectives
By the end of this course, participants will be able to:
- Understand the main cyber threats and attack methods
- Assess cyber risk in business terms
- Oversee key security controls and frameworks
- Prepare for and manage cyber incidents
- Build security awareness and culture
Course outline
Day 1The Cyber Threat Landscape
- Threat actors
- Common attacks: phishing, ransomware
- Recent incidents
- Impact on organisations
- Discussion
Day 2Cyber Risk Management
- Assets and threats
- Risk assessment
- Risk appetite
- Cyber insurance
- Assessment exercise
Day 3Security Controls
- Security frameworks
- Identity and access
- Network and endpoint security
- Third-party risk
- Case study
Day 4Incident Response
- Incident response plans
- Roles and escalation
- Communication in incidents
- Recovery
- Tabletop exercise
Day 5Governance and Culture
- Board reporting
- Security metrics
- Awareness programmes
- Security culture
- Action plan
