Introduction:

As security professionals we have seen the landscape change. Cyber security is now more vital and relevant to the growth of your organization than ever before. As a result, information security teams have more visibility, more budget, and more opportunity. However, with this increased responsibility comes more scrutiny. This course teaches security professionals how to navigate this new world of security by developing strategic plans, creating effective information security policy, and developing management and leadership skills. Strategic planning is hard for IT and IT security professionals because we spend so much time responding and reacting. We almost never do strategic planning until we get promoted to a senior position, and then we are not equipped with the skills we need to run with the pack. This course will teach you how to develop strategic plans that resonate with other IT and business leaders.

Policy is a manager's opportunity to express expectations for the workforce, set the boundaries of acceptable behavior, and empower people to do what they ought to be doing. It is easy to get wrong. Policy must be aligned with an organization's culture. In this course, we break down the steps to policy development so that you have the ability to design and assess policies that can successfully guide your organization. Leadership is a skill that must be learned, exercised, and developed to better ensure organizational success. Strong leadership is brought about primarily through selfless devotion to the organization and staff, tireless effort in setting the example, and having the vision to see and effectively use available resources toward the end goal. Effective leadership entails persuading team members to accomplish their objectives, removing the obstacles preventing them from doing it, and maintaining the well-being of the team in support of the organization's mission. This course will teach you to use management tools and frameworks to better lead, inspire, and motivate your teams.

Course Objectives:

By the end of this course, delegates will be able to:

• Develop security strategic plans that incorporate business and organizational drivers
• Develop and assess information security policy
• Use management and leadership techniques to motivate and inspire your teams

Who Should Attend?

IT Engineers, IT Professionals, IT Directors, Engineers, IT Project Managers, IT Auditors, IT Compliance Managers, IT Coordinators, IT Support Managers, IT Officers, IT Support Specialists, IT System Administration, Technical Support Professionals, Chief Information Officers, Chief Risk Officers, Information Assurance Officers, Program Managers, Network Systems Analysts, Government Program Managers, R&D Project Managers, Software and System Developers, Chief Security Officers, Security Specialists, Chief Information Security Officers, Directors of Security, Security Architects, Security Operation Center Managers, Security Consultants, Security Managers, Security Auditors, Security Directors, Systems Administrators, Incident Response Analysts, Business Owners, Security Analysts, Security Systems Engineer, Network Architect, Operations Managers, Risk Management Professionals, Network Administration Professionals, Application Developers, Application Support Analysts, Application Engineers, Associate Developers, Technology Officers, Information Officers, Help Desk Specialist, Help Desk Technician, Database Administrators, Network Architects, Network Engineers, Network System Administrators, System Analysts, System Architects, System Designers

Course Outline:

Strategic Planning Foundations

• Vision and Mission Statements
• What they tell you about the organization
• Developing a security team mission statement that aligns with organizational goals
• Stakeholder Management
• Learn to identify, understand, and manage stakeholders in order to make the security team more successful
• PEST Analysis
• Identify market forces that drive the business in order to better understand business goals
• Porter's Five Forces
• Understand how business leaders develop strategy
• Apply this analysis to security vendors so you can make more informed purchase decisions
• Threat Actors
• Understand attacker motivations and techniques
• Review real-word attack scenarios
• Asset Analysis
• Understand assets that are most valuable to the business and are of interest to attackers
• Threat Analysis
• Learn how the intrusion kill chain and threat intelligence can inform strategic planning

Strategic Roadmap Development

• Historical analysis
• Analyze the past in order to understand the probable future
• Values and Culture
• Understand the values and culture of your organization in order to align security with the corporate culture and define acceptable working norms
• SWOT Analysis
• Understand current strengths, weaknesses, opportunities, and threats
• Vision and Innovation
• Sustaining versus disruptive innovation
• Jobs To Be Done Theory
• Learning to innovate with the business
• How to provide value to stakeholders
• Security Framework
• NIST Cybersecurity Framework
• Measuring maturity
• Gap Analysis
• Identifying what needs to be done
• Roadmap Development
• Identifying what should be done first
• Business Case Development
• Approaches to obtaining funding
• Metrics and Dashboards
• Developing effective metrics
• Marketing and Executive Communications
• Promoting the work of the security team

Security Policy Development and Assessment

• Purpose of Policy
• Role of policy
• Establishing acceptable bounds for behavior
• Empowering employees to do the right thing
• How policy protects people, organizations, and information
• Relationship of mission statement to policy
• Policy Gap Analysis
• Policy versus procedure
• Policy needs assessment
• Policy Development
• Governing policy
• Issue-specific policy
• Positive and negative tone
• Policy Review
• Using the SMART approach
• Policy review and assessment process
• Awareness and Training
• Role of psychology in implementing policy

Leadership and Management Competencies

• Leadership Building Blocks
• Creating and Developing Teams
• Coaching and Mentoring
• Customer Service Focus
• Conflict Resolution
• Effective Communication
• Leading through Change
• Relationship Building
• Motivation and Self-direction
• Teamwork
• Leadership Development

Strategic Planning Case Studies

• Creating a Security Plan for the CEO
• Understanding Business Priorities
• Enabling Business Innovation
• Working with BYODs
• Effective Communication
• Stakeholder Management

COURSE LOCATIONS