Cybersecurity · Advanced level

Advanced level · Module 6 of 6 · 30 guided hours

Capstone: Organisational Security Programme

Combine the level into a complete, realistic security programme for an organisation.

Learning objectives

  • Assess an organisation with CSF 2.0 and a risk register
  • Design prioritised improvements and plans
  • Test the incident response plan with a tabletop exercise
  • Present a funded roadmap to leadership

Topics

  • scoping
  • assessment
  • programme design
  • tabletop testing
  • roadmap and budget
  • leadership presentation

Lessons

  1. Lesson 1 Scoping and Assessment

    Agree the scope and assess the organisation's current position.

    scopepermissioncurrent profilerisk register

  2. Lesson 2 Designing the Programme

    Turn the gaps and risks into practical plans.

    target profileprioritisationplansresources

  3. Lesson 3 Testing the Incident Response Plan

    Run a tabletop exercise with the organisation's team.

    tabletopinjectsobservationsplan updates

  4. Lesson 4 Roadmap and Budget

    Sequence the programme over 12 months with realistic costs.

    roadmapquick winsdependenciesbudget estimates

  5. Lesson 5 Presenting to Leadership

    Win support for the programme from leaders.

    executive summaryrisk in mission termsdecisions requestedhandling questions

Practical activity

Complete the Organisational Security Programme level project.

Expected outcomes

  • A complete, defensible security programme
  • Leadership communication skills

Assessment

Level project assessed against its criteria by a panel.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.