1

The concepts of cybersecurity and the ISO 27032 standard

• Course objectives and structure.
• Regulatory framework and standards.
• Definition of fundamental cybersecurity concepts.
• Planning a cybersecurity program.

2

Initiating a cybersecurity program

• Organizational structure.
• Defining the roles and responsibilities of cybersecurity agents.
• Establishing the governing policies and principles of cybersecurity.
• Cybersecurity risk management within enterprise risk management.
• Assessing cybersecurity risks.

3

Implementing a cybersecurity program

• Implementing a document management framework.
• Sharing information and coordinating with key players.
• Developing a training program and instructing both staff and key players.
• Implementing specific cybersecurity controls.
• Cybersecurity incident management and integrating it into ordinary incident management.
• Operational Continuity Management.

4

Assessing the performance of the cybersecurity program

• Measuring the return on the actions taken.
• Self-assessment of controls.
• Implementing an assurance environment.
• Assessing the level of cyberthreat preparation.
• Suitability of the implementation of continuous improvement.
• Measuring how fully the cybersecurity controls are integrated into the Information Security controls.
• Overview of the PECB certification system.

5

Taking the certification exam

• Domain 1: Fundamental concepts of cybersecurity.
• Domain 2: Guide to launching, implementing, and managing a cybersecurity program.
• Domain 3: Role and responsibility guidelines for cybersecurity stakeholders.
• Domain 4: Cybersecurity risk management.
• Domain 5: Monitoring activities tied to the cybersecurity program.