Welcome to Week 2

Last week you established the foundations of cyber security thinking: what it means in a business context, why it matters to organisations globally, and how the CIA Triad provides a framework for protecting the confidentiality, integrity and availability of information. You also began to look at your own organisation through a security lens and identified one practical action you could take as a manager.

This week you build on those foundations by exploring how organisations manage information security in a structured, systematic way. Information security management is not simply a matter of installing software or circulating a policy document. It is an ongoing organisational discipline that requires leadership commitment, clear governance, practical controls, a culture of compliance and a continuous cycle of assessment and improvement.

As a mid-level manager, you are a critical part of making that system work. You are not expected to be a technical expert. You are expected to understand the framework well enough to make informed decisions, ask the right questions, and lead your team in ways that actively support your organisation’s security posture.

This week you will:

• Understand what an Information Security Management System is and why it matters for organisations of all sizes and sectors
• Explore the key policies, standards and governance frameworks that guide organisational information security
• Examine the types of security controls available and how they work in practice
• Develop a foundational understanding of risk management in a cyber security context
• Consider the role of compliance and regulatory requirements, including the global data protection landscape
• Complete an interactive task identifying security control gaps in a realistic business scenario
• Complete a reflective homework task and a weekly knowledge check

In the prompt below, share your thoughts and reflection from week 1.