This course aims to educate board members on the responsibilities and role they play in ensuring proper governance and strategic direction in cybersecurity. The course covers topics such as technology, financial loss, preventing breaches, enterprise risk management, legal implications, industry requirements, incident response, and educating developers. The teaching method includes lectures and discussions. This course is intended for board members looking to enhance their understanding of cybersecurity and its implications on business operations.
Overview
Syllabus
Introduction
The role of a board member
Responsibilities of board members
Institute of Internal Auditors
Technology
Financial Loss
Institutional Shareholder Service
Where does security report
CISO vs CSO mission
Governance
Visibility
Transparency
Preventing breaches
Communication
Security and Business Value
Comprehensive Approach
Guiding Principles
Enterprise Risk Management
Legal Implications
ISO
Breaches
Industry Requirements
Policies
Cybersecurity
Assets
Outsourcing
Hurricane Katrina
Unplanned Events
Advanced Persistent Threats
Protecting Information
Challenges
Educating Developers
Insider Threats
Risks
Proper Governance
Strategic Direction
Business Issues
Incident Response
Systemic Escalation
References
Education
Being transparent
Questions
Composition of Board
Going Beyond Framework
How do you communicate
Any other questions
