Cybersecurity for Management

8 hours to complete

Scheduled hours: 8 hours
Estimated study hours: 2 hours

Intermediate

Intermediate experience required

Details

10 seats available

Instructors

Shamoona Imtiaz
Simon Bouget
Han Wang

Language

English

This course is for decision makers and mangers to understand cybersecurity from a strategic and business perspective. Participants will learn what organizations need to protect, the threats they face, how vulnerabilities are exploited, who cyber attackers are and how attackers think. The course also explores how organizations can prepare for detect and respond to cyber incidents. Through practical examples and exercise, participants will examine phishing attacks. They will learn about what is cybercrime ecosystem and how to prevent and manage common cyberattacks. Attention is given to the role of decision makers including key considerations for actions to take before, during and after a cyber incident. This is to give knowledge about how individual behaviour can affect organizational security. The course also addresses the secure and responsible use of artificial intelligence (AI) including risks related to data loss, intellectual property, AI hallucination and considerations when selecting and using AI tools. Participants will discuss targeted attacks and reflect on appropriate managerial responses. Finally, the course introduces key cybersecurity compliance requirements and minimum security measures associated with ISO 27001 and NIS2. Overall, the course is designed to help managers make informed cybersecurity decisions, strengthen organizational resilience and better integrate cybersecurity into everyday management and business operations.

Learning Objectives

Understand fundamental cybersecurity concepts, threats and attack strategies affecting organisations, and their potential impact on the organisation.
Interpret and evaluate assessments and recommendations provided by specialists, to select security controls and investments according to risk-based principles.
Understand organisational responsibilities and key requirements arising from cybersecurity governance frameworks such as ISO 27001 and NIS2, and ensure the organisation compliance.
Assess risks associated with AI systems, cyber-threat intelligence and AI-enabled attacks.
Contribute effectively to organisational preparedness, incident response, recovery and continuous improvement activities, including the promotion of security-conscious behaviors and communication with relevant stakeholders.
Apply practical measures to improve the security of organisational accounts, information, communications and digital assets.

Prerequisites

No specific technical cybersecurity knowledge or skill are required. Ability to use a computer, web browser, email and common workplace digital services. It is not mandatory but would be good a have familiarity with common AI tools and general awareness of cybersecurity, risk management, European data protection framework and regulations.

Modules

Cybersecurity Foundations and Risk Thinking

2 hours to complete

Understand cybersecurity concepts well enough to reason about cyber risk, evaluate trade-offs, and promote appropriate security behaviour within the organisation: - Cybersecurity mindset: security as a trade-off, security culture. - Fundamental concepts: CIA triad, trust relationships. - Defence in depth and Weakest-link principles. - Cybercrime ecosystem, targeted vs opportunistic attacks, hybrid threats. - Quantitative vs intuitive risk assessment. - How to communicate with experts.

Organisational Security and Risk Management

2 hours to complete

Understand organisational cyber risk well enough to support specialists, make informed decisions, and prioritise protective measures appropriately. - Practical security measures: Password managers, MFA, phishing awareness, back-ups. - Supplier and third-party risk, Open-source vs proprietary dependencies. - Security-by-design - Security policy trade-offs, security investments and prioritisation. - Modelling good security behaviours as a manager, leading by example. - Incident response and recovery basics.

AI Risks, Threat Intelligence and Emerging Threats

2 hours to complete

Scheduled hours: 2h

Understand how AI changes the cyber threat landscape and assess the risks associated with - - AI-enabled tools, attacks and decision-making processes. - AI fundamentals, appropriate AI tool selection. - Technology risks: Data leakage to AI services, Reliability of AI outputs (hallucinations), Risks of autonomous or agentic AI workflows. - AI uses by attackers: Deepfakes, AI-assisted phishing, Executive impersonation, Prompt injection attacks. - Cyber-threat intelligence.

Cybersecurity Compliance

2 hours to complete

Scheduled hours: 1h

Understand management responsibilities under cybersecurity governance frameworks and support organisational compliance efforts. - Key cybersecurity requirements and practices under ISO 27001 and NIS2 covering - Cybersecurity risk management, governance and management responsibilities - Incident preparedness, response, business continuity and organizational resilience - Managing security risks related to people, technology, suppliers and third parties - Implementation, assessment and continuous improvement of cybersecurity measures

Build your expertise

This course is part of the following learning pathways: SME Cybersecurity Responsible

Cybersecurity skills are not built in a single session. Following a structured learning pathway helps you develop a complete and consistent skill set: step by step, at your own pace.

Not sure where to start?

Learn how the Cycerone portal works, how courses and learning pathways are organized, and how to find the training opportunities that best match your needs.

Discover how it works

8 hours to complete

Intermediate

Details

Instructors

Shamoona Imtiaz

Simon Bouget

Han Wang

Language

Learning Objectives

Prerequisites

Modules

Cybersecurity Foundations and Risk Thinking

2 hours to complete

Organisational Security and Risk Management

2 hours to complete

AI Risks, Threat Intelligence and Emerging Threats

2 hours to complete

Cybersecurity Compliance

2 hours to complete

Build your expertise

This course is part of the following learning pathways: SME Cybersecurity Responsible

Not sure where to start?