Cybersecurity Programme and Risk Management

1. Three Main Security Goals(CIA) and its relevance in Cyber Security Program
2. Frameworks and standards for consideration
3. Cyber Security Program Management – components for consideration
- Cybersecurity governance
- Threat identification
- Risk management
- Risk mitigation
4. Cyber Security Governance– where, what and how (Strategy planning, roadmap, resource planning & deciding a list of policies, procedures, standards and processes)
5. Threat Identification
- Threat intelligence and Sharing – why the importance and the methodology
- Threat intelligence and detection
- Threat analysis and defence
6. Cyber Security Risk Management
- Cataloguing the risk
- Quantifying the risk
- Measuring the risk
- Communicating the risk
7. Types of Security Controls – preventative, detective & Responsive
8. Risk Mitigation
- Responsibilities of Security Architect(implement or configure added controls)
- Responsibilities of SOC(adopt and monitor added controls)
9. Cyber Security requirements
- Policy, Process, Procedures, Standards, Guidelines, Baselines
- Confidentiality, Integrity and Availability
- Authentication, Authorization and Auditing
- Threat Modelling
- Data/Information Governance
- Zero Trust Network
- Activity-based Security Controls – Deterrent, Preventive, Detective, Corrective
- Cybersecurity Operations Centre – people, process, technology, regulations, standards
- Incident Management – Detection, Prevention, Response
- Business Continuity Planning (BCP) & Disaster Recovery
- Security by Design Principles
- Security Education and Awareness

Add to Comparison Back to All Courses