Certificate in Cyber Risk Threats & Management

Day 1

Cyber Threats – are they real?

• Prevalence of cyber crime business
• 10 common types of cyber attacks
• Case studies of cyber threats

Cyber Vulnerabilities – where are they?

• Emergence of IoT
• Negligent Users
• Sophistication of hackers
• Misalignment of incentives
• Covid-19 impact on cyber vulnerabilities
• Interactive Exercise: “Map Your Organization’s Exposure”

Cyber Resilience – how to manage?

• What is cyber hygiene
• Cyber hygiene best practices
• Cyber hygiene notice & data loss protection guidelines
• Workshop: How to detect phishing emails

Day 2

Cyber Insurance – What is covered?

• Silent cyber vs affirmative cyber
• Underwriting information
• Accumulation of risks
• Future of cyber insurance underwriting
• Case Study: NotPetya Attack– Who paid? (Maersk, Mondelez)

Cyber Risk Management – What’s next?

• Cyber risk management framework (NIST, ISO 27001)
• Cyber risk management process
• Stress testing and scenario modeling (tabletop exercise)
• Partnership in combating cyber-crime
• Roles of professionals in Cyber Risk Management

Capstone Activity: “Defend Your Industry”

• Teams role-play as CISOspresenting a cyber resilience plan for:
• A hospital (patient data)
• A bank (fraud prevention)
• A retailer (PCI compliance)