Managing Cyber Security Risk Training Course

The three-day Managing Cyber Security Risk classroom training course builds on basic foundation-level knowledge of information security management practices to equip practitioners with the expertise to manage cyber security risk and meet compliance objectives in organisations of any size. It also supports professional development: delegates who pass the included exam are awarded the ISO 17024-certificated Managing Cyber Security Risk (CCRMP) qualification by IBITGQ.

Drawing on real-life case studies, an experienced senior information risk consultant will provide you with insights to enable you to create a blueprint for a plan that not only includes the implementation of technical measures (controls) but also takes into account the people, processes, governance, leadership and culture in your organisation.

What will you learn?

• The nature of cyber risk and types of cyber attack.
• The difference between cyber security and cyber resilience.
• Practical lessons with examples of real cyber breaches.
• An understanding of current cyber security standards and best practices:
  
  • PAS 555
  • 10 Steps to Cyber Security
  • 20 Critical Controls for Cyber Defence
  • Cyber Essentials scheme
  • ISO 27001 and integrated management systems
  • Links to other standards, including ISO 20000
  • Other frameworks, such as NIST, COBIT 5, the PCI DSS and RESILIA
• The role and the importance of people, processes and technology.
• Approaches to risk management, cyber incident response and business continuity.
• How ISO 27001 provides a backbone for protecting your organisation.
• Why ISO 22301 is essential to achieving cyber resilience in the event of an attack.
• How to demonstrate cyber security assurance to stakeholders including your board, staff, partners and customers.
  
  The course also includes a case study workshop that explores tackling cyber security within a fast-growing international organisation.

• Senior directors (CEO, CIO, CSO) responsible for strategic and business planning.
• IT and information security managers responsible for cyber security.
• ISO 27001 Lead Implementers and Lead Auditors.
• PCI QSAs and other PCI DSS practitioners.
• Professionals who hold CISA, CISM, CISSP, CRISC or CISMP certifications, and who wish to apply their current knowledge to the broader context of cyber security.
• Risk and compliance managers or consultants who require an understanding of cyber security risk management outcomes and processes.

Information security practitioners who want to develop a cyber security career.

While there are no formal entry requirements, all delegates are expected to have a practical understanding of information security. We recommend that you purchase and read the following textbooks prior to attending the course:

• IT Governance - An International Guide to Data Security and ISO27001/ISO27002, Sixth Edition
• CyberWar, CyberTerror, CyberCrime and CyberActivism, Second Edition