Home > Courses > CISO Technical Programme: Advanced Persistent Threat Detection and Response

CISO Technical Programme: Advanced Persistent Threat Detection and Response

Name: CISO Technical Programme: Advanced Persistent Threat Detection and Response
Price: 2100.00 SGD

Training Provider: SINGAPORE INSTITUTE OF TECHNOLOGY

Course Reference: TGS-2026066299

S$2,100

Original: S$7,000

Save S$4,900

About This Course

This five-day (40-hour), scenario-driven course prepares Chief Information Security Officers (CISOs), Chief Information Officers (CIOs) and equivalent executive-level cybersecurity professionals to lead their organisations through complex, multi-domain cyber incidents affecting Singapore’s critical infrastructure. Designed for participants with experience in cybersecurity operations, governance and risk management, it develops strategic decision-making, operational leadership and crisis response capabilities against advanced threats, including nation-state actors.

Delivered to cohorts of up to 20 participants, the course integrates cybersecurity governance, advanced threat understanding, incident response leadership and artificial intelligence. Instructor-led sessions, hands-on labs, team exercises and a full-scale capstone simulation use realistic scenarios aligned with Singapore’s regulatory environment and sector-specific threat intelligence.

Participants will be better equipped to translate governance frameworks into enforceable operational controls, lead cross-functional incident response under pressure, and produce executive-level reporting aligned with the Singapore Cybersecurity Act and Cyber Security Agency of Singapore (CSA) guidance.

What You'll Learn

This course equips participants to govern, detect, investigate and lead responses to advanced cyber threats. Participants will translate Singapore regulatory requirements, including the Cybersecurity Act, into practical controls; quantify advanced persistent threat (APT) risk in business terms; identify policy and governance gaps; and use artificial intelligence (AI)-assisted tools responsibly. They will examine the APT lifecycle using MITRE Adversarial Tactics, Techniques and Common Knowledge (ATT&CK), analyse real log data, identify telemetry and logging gaps, design targeted detection use cases, and evaluate AI-assisted detection against traditional security information and event management (SIEM) approaches. Through tabletop exercises and crisis simulations, participants will practise structured incident response, make decisions under pressure, coordinate technical, legal, communications and executive stakeholders, and use AI to support triage, recommendations and situational awareness. Hands-on enterprise and cloud scenarios will cover Active Directory compromise, identity attacks, Kerberos abuse, lateral movement, cloud misconfiguration, logging gaps and data exfiltration, alongside the design of AI-enhanced security operations centre (SOC) workflows. The capstone simulation integrates detection, escalation, impact assessment, crisis communication, recovery and regulatory reporting, requiring participants to justify high-stakes decisions and produce an executive incident report covering the timeline, root cause, compliance considerations and lessons learned.

Entry Requirements

• Participants must be practising Chief Information Security Officers (CISOs), Chief Information Officers (CIOs), or equivalent senior cybersecurity executives with prior experience in cybersecurity operations, governance, and/or risk management.
• Participants are expected to be familiar with core cybersecurity concepts.
• No formal academic qualification is required, but a minimum of 5 years' professional experience in a cybersecurity leadership role is recommended.
• This course is not suitable for entry-level or intermediate practitioners.