Mastering Policy and Governance for Cyber Success

Syllabus

• Week 1

  Plan – Translate Regulatory Mandates into Policy Clauses

  • Lesson 1: Course Introduction

    Gain a strategic roadmap for cybersecurity governance. Learn to unify ISO, NIST, GDPR & AI Act requirements into business-driven policies, training, and controls for measurable impact.

  • Lesson 2: Identify Policy Goals

    Learn to align cybersecurity goals with regulatory mandates and business priorities. Define the value of governance and clarify compliance needs as the foundation for policy development.

  • Lesson 3: Define ISMS Scope

    Master ISMS scoping by defining boundaries, organisational context, and documentation hierarchies to ensure every control has a clear role and aligns with your enterprise structure.

  • Lesson 4: Draft Core Policies

    Turn governance goals into enforceable cybersecurity policies. Use AI tools and templates to draft ISO 27001/NIST CSF clauses and gain executive buy-in for approval.

• Week 2

  Assess – Customise Policy Frameworks for Your Organisation

  • Lesson 5: Conduct Risk Assessment

    Perform enterprise-wide risk assessments using ISO 27005 and NIST SP 800-30. You’ll identify and prioritise key security risks based on business impact. This forms the basis for tailoring governance to real-world threats.

  • Lesson 6: Customise Controls

    Tailor your security controls by department, risk exposure, and business function. You’ll map ISO and NIST safeguards to your organisation’s top risks. This lesson focuses on risk-control alignment and operational fit.

  • Lesson 7: Evaluate AI & Privacy Risk

    Assess AI and privacy-specific risks using ISO 27701 and the EU AI Act. You’ll explore data protection concerns, GDPR intersections, and automation tools. By the end, you’ll be ready to integrate privacy into your ISMS strategy.

• Week 3

  Implement – Develop Role-Based Training Programmes

  • Lesson 8: Design Role-Based Training

    Create role-based training that reinforces cybersecurity policy. Build simulations and awareness activities tailored to job functions while tracking participation and compliance outcomes.

  • Lesson 9: Deploy Governance Controls

    Deploy key technical and procedural security controls across your organisation. Focus on cloud-specific guidance (ISO 27017) and enforcement practices. You’ll also address third-party and vendor governance needs.

  • Lesson 10: Patch Management

    Implement structured vulnerability management and patch deployment cycles. Use tools and documentation to ensure consistency and auditability. This lesson enhances system resilience and supports ongoing compliance.

• Week 4

  Operate – Integrate Multi-Standard Compliance Controls

  • Lesson 11: Run Incident Simulations

    Run tabletop and live cybersecurity drills to validate incident response. Apply ISO 27035 and NIST 800-61 guidelines with structured playbooks to prepare teams for real-world threats.

  • Lesson 12: KPI Dashboards & Metrics

    Design executive-level dashboards to track governance performance in real time. Measure training completion, policy coverage, and incident response metrics. This enables data-driven decision-making and operational visibility.

  • Lesson 13: Continuous Improvement

    Embed continual improvement to keep governance audit-ready. Use feedback, update controls, and refine training with performance data to ensure security evolves with changing risks.

  • Lesson 14 : Course Conclusion

    Summarize key insights from all modules, reinforce best practices, and highlight next steps. Learners leave with a clear roadmap to lead effective, audit-ready cybersecurity governance.

Who will you learn with?