Security / Governance, Risk & Compliance

Lead Cybersecurity Manager.

The Lead Cybersecurity Manager training course allows you to develop expertise in establishing, implementing, maintaining and continuously improving a Cyber Security program based on ISO/IEC 27032 and the NIST Cyber Security Framework. During this training, you will gain an understanding of cyber security and how it relates to other types of IT security. You will also understand the relationship between cyber security and organizational security and learn how to implement a cyber security program that is consistent with best practices and frameworks.

Issues

Cyber Security
ISO/IEC 27032
NIST cybersecurity framework
Cyber security program
Cyber security management
Organizational security
IT Security
Cyber security best practices
Cyber security team
Cyber security monitoring
Continuous improvement
Compliance

Benefits

Master the concepts, approaches, methods and techniques of cyber security program management
Understand the relationship between the cyber security program and other management systems
They will gain skills to advise organizations on cyber security best practices
Develop the knowledge and skills to lead a cyber security team

Who is this training for?

Cyber security managers

Information security and IT specialists

Consultants and advisors looking to master cyber security program management

Cyber security compliance officers

Prerequisites

Basic knowledge of cyber security and IT security
Knowledge of cyber threats
Experience in IT project management (preferred)
Team management skills

Training program

Introduction to cybersecurity — threat landscape, APT, ransomware, supply chain attacks, incident statistics
ISO/IEC 27032 — scope, concepts, relationship with information security, network, application, and internet security
NIST Cybersecurity Framework (CSF) — Identify, Protect, Detect, Respond, Recover, profiles, and maturity levels
Cybersecurity program — establishment, structure, roles, responsibilities, budget, board reporting
Relationship between cybersecurity and ISMS (ISO 27001) — integration, complementarity, shared controls
Exercises: organizational cybersecurity maturity analysis according to NIST CSF

Cybersecurity risk management — asset, threat, and vulnerability identification, impact assessment
Threat analysis — threat intelligence, MITRE ATT&CK, kill chain, TTPs (Tactics, Techniques, Procedures)
Network security — segmentation, firewall, IDS/IPS, VPN, zero trust architecture
Application security — OWASP Top 10, secure SDLC, penetration testing, code review
Cloud security — shared responsibility model, CASB, cloud security configuration
Exercises: cybersecurity risk assessment, threat mapping on MITRE ATT&CK

Identity and Access Management (IAM) — MFA, PAM, SSO, privilege management, least privilege
Endpoint protection — EDR, antimalware, hardening, vulnerability management, patching
Data protection — classification, encryption, DLP, backup, retention, personal data protection
Security awareness — Security Awareness program, phishing simulations, employee training
Supply chain security — supplier assessment, security requirements, third-party risk monitoring
Exercises: designing cybersecurity controls for an organizational scenario

Monitoring and detection — SIEM, SOC, log analysis, event correlation, threat hunting
Incident response — IR plan, CSIRT team, classification, containment, eradication, recovery
Crisis management — crisis communication, escalation, cooperation with authorities, notification
Cybersecurity metrics — KPIs, KRIs, MTTD, MTTR, coverage, maturity, reporting
Continuous improvement — lessons learned, testing (tabletop, red team/blue team), program updates
Exercises: incident response simulation (tabletop exercise), program metrics development

Cybersecurity program summary — review of key ISO 27032 and NIST CSF concepts
Cybersecurity regulations — NIS2, DORA, GDPR in the cybersecurity context
Case studies — cybersecurity program analysis in organizations
PECB certification preparation — exam format, question types, passing strategies
Practice exam — PECB Certified Lead Cybersecurity Manager exam simulation
PECB certification exam (optional) — written exam leading to PECB Certified Lead Cybersecurity Manager certificate

Delivery Methods

Online

Convenience of participating from anywhere
Interactive live sessions with trainer
Materials available for 30 days
No travel costs

On-site

Direct contact with trainer and group
Intensive hands-on workshops
Networking with other participants
Full focus on learning

Frequently asked questions

What are the prerequisites for this training?

For Lead Cybersecurity Manager. we recommend: Basic knowledge of cyber security and IT security; Knowledge of cyber threats; Experience in IT project management (preferred).

What is the format and duration of this training?

The training lasts 5 days and is available in online and on-site format. Sessions run from 9:00 AM to 4:00 PM. We can also customize the schedule to fit your team's needs.

Who is this training designed for?

This training is designed for: Cyber security managers; Information security and IT specialists; Consultants and advisors looking to master cyber security program management.