Building Your Knowledge: Looking Ahead

Week 1 has introduced the foundational language and context of cyber security in business. As you progress through the course, you will build on these foundations in the following ways.

Week 2: you will explore the formal frameworks and governance structures that organisations use to manage information security, including policies, standards and the role of compliance.

Week 3: you will develop a more detailed understanding of specific threat types and learn how to carry out a structured risk assessment.

Week 4: you will examine how security management systems are planned, implemented and monitored in practice, including incident response and cloud security.

Week 5: you will explore the human, legal and ethical dimensions of cyber security, including data protection legislation, insider threats and professional responsibility.

Week 6: you will consider emerging trends including artificial intelligence and develop a strategic perspective on building organisational cyber resilience.

Each week builds on the last. The concepts introduced this week, particularly the CIA Triad and the idea of cyber security as a leadership responsibility, will recur throughout the course.

Reflection Task: Your Cyber Security Starting Point

Estimated time: 30 to 45 minutes | To complete before Week 2

Part One: Personal Reflection

Before moving on to Week 2, take some time to reflect honestly on your current relationship with cyber security. Consider the following questions:

• Before starting this course, how much did you think about cyber security as part of your management role?
• Which of this week’s concepts was most surprising or challenging for you? Why?
• Where do you feel most confident and least confident in relation to cyber security right now?

Part Two: Workplace Observation

Over the next week, carry out a brief informal observation in your workplace. You do not need to conduct any formal audit or raise concerns with colleagues at this stage. Simply observe and note:

• Are there any visible signs of good security practice in your team, such as screen locking, clear desk policies or two-factor authentication prompts?
• Are there any practices that seem to represent a potential risk, such as passwords written down, unattended screens or the use of personal devices for work data?
• Does your organisation have any visible cyber security policies, guidance or training materials? Are your team members aware of them?

Part Three: One Action

Identify one small, practical action you could take as a manager to improve the cyber security awareness or practice of your team. This does not need to be complex or technical. It might be as simple as starting a brief conversation, sharing a resource or asking your IT or security team a question. Note down what this action is and why you have chosen it.

You will have an opportunity to share your reflections and observations at the start of Week 2. Your insights from your own organisational context will enrich the learning experience for everyone in this global community of learners.