Introduction:

This course teaches IT professionals how to navigate this new world of security by developing strategic plans, creating effective information security policy, and developing management and leadership skills. This course outlines the essential skills required in leading individuals and organizations, whether it’s solving problems, creating the optimal team, or maneuvering through difficult situations in management.

Course Objectives:

By the end of this course, delegates will be able to:

• Develop security strategic plans that incorporate business and organizational drivers
• Develop and assess information security policy
• Use management and leadership techniques to motivate and inspire your teams

Who Should Attend?

IT Engineers, IT Professionals, IT Directors, Engineers, IT Project Managers, IT Auditors, IT Compliance Managers, IT Coordinators, IT Support Managers, IT Officers, IT Support Specialists, IT System Administration, Technical Support Professionals, Chief Information Officers, Chief Risk Officers, Information Assurance Officers, Program Managers, Network Systems Analysts, Government Program Managers, R&D Project Managers, Software and System Developers, Chief Security Officers, Security Specialists, Chief Information Security Officers, Directors of Security, Security Architects, Security Operation Center Managers, Security Consultants, Security Managers, Security Auditors, Security Directors, Systems Administrators, Incident Response Analysts, Business Owners, Security Analysts, Security Systems Engineer, Network Architect, Operations Managers, Risk Management Professionals, Network Administration Professionals, Application Developers, Application Support Analysts, Application Engineers, Associate Developers, Technology Officers, Information Officers, Help Desk Specialist, Help Desk Technician, Database Administrators, Network Architects, Network Engineers, Network System Administrators, System Analysts, System Architects, System Designers

Course Outline:

Strategic Planning Foundations

• Vision and Mission Statements
• What they tell you about the organization
• Developing a security team mission statement that aligns with organizational goals
• Stakeholder Management
• Learning to identify, understand, and manage stakeholders in order to make the security team more successful
• PEST analysis
• Identifying market forces that drive the business in order to better understand business goals
• Porter’s Five Forces
• Understanding how business leaders develop strategy
• Applying this analysis to security vendors so you can make more informed purchase decisions
• Understanding attacker motivations and techniques
• Reviewing real-word attack scenarios
• Asset analysis
• Understanding assets that are most valuable to the business and are of interest to attackers
• Threat analysis
• Learning how the intrusion kill chain and threat intelligence can inform strategic planning

Strategic Roadmap Development

• Historical analysis
• Analyzing the past in order to understand the probable future
• Values and culture
• Understanding the values and culture of your organization in order to align security with the corporate culture and define acceptable working norms
• SWOT analysis
• Understanding current strengths, weaknesses, opportunities, and threats
• Vision and innovation
• Sustaining versus disruptive innovation
• Learning to innovate with the business
• How to provide value to stakeholders
• Security framework
• NIST cyber security framework
• Measuring maturity
• Gap analysis
• Identifying what needs to be done
• Roadmap development
• Identifying what should be done first
• Business case development
• Approaches to obtaining funding
• Metrics and dashboards
• Developing effective metrics
• Marketing and executive communications
• Promoting the work of the security team

Security Policy Development and Assessment

• Purpose of policy
• Role of policy
• Establishing acceptable bounds for behavior
• Empowering employees to do the right thing
• How policy protects people, organizations, and information
• Relationship of mission statement to policy
• Policy gap analysis
• Policy versus procedure
• Policy needs assessment
• Policy development
• Governing policy
• Issue-specific policy
• Positive and negative tone
• Policy review
• Using the SMART approach
• Policy review and assessment process
• Awareness and training
• Role of psychology in implementing policy
• Organizational culture

Leadership and Management Competencies

• Leadership building blocks
• Creating and developing teams
• Coaching and mentoring
• Customer service focus
• Conflict resolution
• Effective communication
• Leading through change
• Relationship building
• Motivation and self-direction
• Teamwork
• Leadership development

Strategic Planning: Case Study

• Creating a security plan for the CEO
• Understanding business priorities
• Enabling business innovation
• Working with BYODs
• Effective communication
• Stakeholder management

COURSE LOCATIONS