Duration
2 days
OVERVIEW
Cyber Security is a hot topic of the moment and given the potential risks faced by organisations if it is not well managed, it is vital for organisations to equip their key personnel with the knowledge and skills to enable them to face the security challenges of today and also prepare them to meet the challenges that tomorrow brings.
In this workshop, delegates will be able to understand Cyber Security Fundamentals and Framework in which they will be exposed to various types of cyber security vulnerabilities in business environment. Delegates will also learn on Risk Management and Data Governance framework which can be applied instantly after the workshop. Delegates will be able to identity the best practices in data governance and data privacy to ensure good cyber security governance to be ahead from the potential threats.
Some of the main learning curves will be on the social engineering threats and Advance Predictive Threats. Delegates will be given real life scenarios and practical cases for analysis and convert the learning into workplace applications. Data Protection practices and instinct will naturally be implanted after the case studies are analysed.
Delegates will be able to respond proactively when it comes to Risk Mitigation for Data Protection for Digitization Initiatives. Governance and Cyber Threats through right process activation which will be included in the workshop.
Global Best Practices will be introduced throughout this workshop from ISO 27001, ISO 270034-35, Cyber Security, Risk Management, GDPR and Data privacy law. The key processes across Risk Management and Security Management will be applied in the learning activities carried out.
DESIGNED FOR
IT Director, Cyber Security Director, IT Manager, HR Director, Finance Head,Operation Manager, CIO, Chief Security Officer, Operation Admiration, IT Support, Policy Makers and Risk Management Department
METHODOLOGY
Instructor Led Presentation, Case Studies, Video and Audio Presentation and Hands-on Activities.
Day 1
Cyber Security Principals & Framework:
- Overview of Cyber Security Threats and Framework
- Current State Analysis and Top issues in Asia and World
- Social Engineering Definition
- Top ten social engineering method used by Hackers
- Ransomware and the impact
- Introduction on Understanding the importance of implementation of cybersecurity control in support and security requirement
- Introduction to four types of cyber security controls as indicated in ISO 27032
- Understanding and explanation on top cyber-threats and mitigation plans.
- Knowledge of attack mechanism such as malware, botnets, DDoS, phishing, exploits kits, data breach, identity theft and ransomware
- Knowledge on industry wide used tools and monitoring systems
- Wifi impact
Fundamental Concept of Cyber Security
- Knowledge of the management principals for implementation cybersecurity programs in organization
- Knowledge of the main standard and framework of Cyber Security
- Knowledge of Cyber Security and Security concepts
- Knowledge of the relationship and the main difference of ISO 270032 and other international standards
Cyber Security Risk Management
- Knowledge and the concept of Risk Management and The Data Governance Principals
- Awareness of cybersecurity risk management process and the acceptable level of risk in cyber security
- Management involvement in relation to Risk Impact and Cyber Risk Incident Management
- Knowledge on implementation of risk management framework
- Knowledge of Cyber Security asset and the importance
- The definition of risk management framework based on ISO 27005
- Understanding overall security risk and cyber security risk
Roles and Responsibility of stakeholders
- Ability to understand importance of assigning and communicating cybersecurity roles and responsibilities
- The Roles of stakeholders – IT Dept, Risk Management and Stake Holders in enhancing cybersecurity program
- Understand the roles and responsibilities of 3rd part providers and consumer as the main stake holder in cyber security
- Distinguish between the roles of individual and roles of the organization in cyber environment
- Understanding the leadership role in defining roles and responsibility of involved parties
- Identifying types of security policies
Day 2
Information Sharing and Coordination
- Knowledge of the establishment of an information sharing and coordination framework that will benefit the internal organization
- Knowledge and techniques and best practices on writing policies, procedures and relevant risk, governance and cyber security documentations
- Understand the knowledge of classification and categorization of information collected, how to handle the safekeeping of information and using the information principals
- Presentation of Data collected and how to turn that into presentable information for organization to support Data Governance and Cyber Security Principals
- Methods of collection of sensitive data and the best practices
Integration of Cyber Security Initiative into Incident Crisis Management
- Understand the roles of business stake holder in the event of crisis on cyber threats
- Preparing for Data Breach
- Planning for Pre Post Data breach
- Planning for Handling Cyber Incident and communication to organization and media
- The R>A>C>I metrics when handling Incident
- Best Practice handling Incident Crisis Management
- Reputation management and the roles of the stake holders
- Defining the business continuity management process according to industry standards, - ISO 27031
Data Governance and the Importance
- Data Protection Lifecycle and the importance
- The Identification of responsibilities’ of individual stake holder in each life cycle and identifying the roles and responsibilities
- Data Privacy by Design principals and evaluating the existing design
- Privacy Design – 7 Principals
- Documentation handling and the Risk Management fundamental
- Data Footprint
- Understanding the concept of Cyber risk to organization operation including mission, function images or reputation, organization asset and individual.
- Introduction to DATA Protection Regulation – GDPR
The impact to organization with these new regulations
Programme scope, delivery arrangements and suitability are confirmed during enquiry.