Courses for top business management: Risks and assessment of cyber threats, company resilience and losses when stopping the information structure
This course is focused on providing top managers with tools to strategically manage cybersecurity within an organization, assess potential risks, and develop practical measures to ensure the company’s resilience in the face of cyber threats.
1. Introduction to cybersecurity for top management
Cybersecurity fundamentals: importance for strategic management of a company
Link between cybersecurity and corporate strategy
2. Cyber threat and risk assessment
Definition and categorization of cyber threats (internal and external threats, threats from personnel and partners)
Types of attacks: phishing, ransomware, DDoS, vulnerability attacks and others
Classic and new attack methods, use of attacks on software vulnerabilities and the human factor
Risk assessment and management according to European standards: ISO 27001, NIST Cybersecurity Framework, ENISA
The role of top management in risk management: strategic planning and ensuring cyber protection
3. Assessing the company’s resilience to cyber threats
Assessment and ensuring resilience to cyber attacks: incident response and recovery
Identification of critical business processes and information resources
The impact of cyber threats on the financial stability of the company
Assessment and support of the Business Continuity Plan and Disaster Recovery Plan
Resilience testing methods (stress tests, cyber simulations)
4. Losses when stopping the information structure
Assessment of financial losses from stopping the information infrastructure: impact on profit, reputation and customers
Assessment of recovery costs and incident response
Modeling situations with stopping the information system and assessing potential losses
Using European protocols for assessing risks and losses: ENISA Guidelines, GDPR requirements for cybersecurity, standards for recovering from incidents
Forecasts for the future: adapting to new threats and changes in cybersecurity regulation
5. Recommendations and practical steps for top management
Building a cybersecurity culture in the company
Defining key performance indicators for monitoring and assessing the level cybersecurity
A strategy for investing in cybersecurity and responsibility for financial stability in the event of attacks
6. Final test and certification
Assessment of knowledge, skills and readiness for managing cyber threat risks for top management
Issuance of certificates of successful completion of the course
