Cybersecurity Programme and Risk Management

This workshop will equip participants with the understanding of policies, process, procedures, standards, guidelines, baselines relating to security (e.g. using ENISA, NIST) and other applicable frameworks; data and technology governance of cybersecurity; threat intelligence and sharing, risk management practices; cybersecurity requirements.

What You'll Learn

• Â Â Â Â Â Three Main Security Goals(CIA) and its relevance in Cyber Security Program
• Â Â Â Â Â Frameworks and standards for consideration
• Â Â Â Â Â Cyber Security Program Management "“ components for consideration
• Â Cybersecurity governance
• Â Threat identification
• Â Risk management
• Â Risk mitigation
• Â Â Â Â Â Cyber Security Governance"“ where, what and how (Strategy planning, roadmap, resource planning & deciding a list of policies, procedures, standards and processes)
• Â Â Â Â Â Threat Identification
• Â Threat intelligence and Sharing "“ why the importance and the methodology
• Â Threat intelligence and detection
• Â Threat analysis and defence
• Â Â Â Â Â Cyber Security Risk Management
• Â Cataloguing the risk
• Â Quantifying the risk
• Â Measuring the risk
• Â Communicating the risk
• Â Â Â Â Â Types of Security Controls "“ preventative, detective & Responsive
• Â Â Â Â Â Risk Mitigation
• Responsibilities of Security Architect(implement or configure added controls)
• Responsibilities of SOC(adopt and monitor added controls)
• Â Â Â Â Â Cyber Security requirements
• Policy, Process, Procedures, Standards, Guidelines, Baselines
• Â Confidentiality, Integrity and Availability
• Â Authentication, Authorization and Auditing
• Â Threat Modelling
• Â Data/Information Governance
• Â Zero Trust Network
• Â Activity-based Security Controls "“ Deterrent, Preventive, Detective, Corrective
• Â Cybersecurity Operations Centre "“ people, process, technology, regulations, standards
• Â Incident Management "“ Detection, Prevention, Response
• Â Business Continuity Planning (BCP) & Disaster Recovery
• Â Security by Design Principles
• Â Security Education and Awareness