Who Should Take this Course:

• Anyone wanting to set up a cybersecurity program for their business or organization
• Most ideal for small or medium size companies that have at least 1 IT person

Module Descriptions

Welcome and Getting Started: Prepare yourself for efficiently and successfully completing the course. You’ll get an overview of what the course is all about and what you should expect out of it.

What is a Cybersecurity Program: Let’s start by exploring what is a cybersecurity program, what are it’s core functions, and who it mitigates risk for a business or organization. We’ll also cover some core cybersecurity definitions and concepts that we’ll use throughout the course.

Implementation Approaches: We’ll set the stage for the three main approaches that I would recommend: Start with action; Start with an Assessment; and Start with a Framework. This will be an overview of the three approaches. We’ll also have a video about change management from a human perspective, that is how to roll out proper change management to help gain the most acceptance for the changes you would be making for the organization.

Lane 1: Start with Action: A cybersecurity program is about making changes that will put the company in the best position for success. This requires action. Delaying action could mean you putting the business at risk. We’ll cover considerations for how to choose which actions are the right first steps for you.

Regulatory Compliance: Laws and regulations continue to evolve and develop to protect consumers. Those businesses that don’t take the new regulatory compliance seriously, may find themselves irrelevant. We’ll cover some of the larger, more common laws and regulations that you may need to implement for your business. We’ll get into what the regulation is, who must comply with it, and some of the highlights of the law.

Critical Cybersecurity Documents: Some documents and policies are requirements, while others are important to legally protect the business. We’ll cover common documents an organization should consider. We’ll discuss who should implement, how the document is used, and look at some examples of the documents.

Cybersecurity Functions: Business operations can be broken down into different individual functions. We’ll get into core functions that can be implemented that will help protect the business from risk. 

Lane 2: Start with an Assessment: One of the core functions of a cybersecurity program is to assess risk, determine solutions, prioritize solutions, and then take action. By starting with an assessment, you can prioritize projects in a way that gives the organization the best return on investment. We’ll cover what risk assessments look like and the basics of how to perform a risk assessment for your organization.

Lane 3: Start with a Framework: A framework helps establish a comprehensive cybersecurity program. Without it, an organization could find itself overlooking risk in areas of its operations. A framework can identify those areas and ensure proper controls are in place to protect those areas.

Wrap Up: Time to wrap up the course and provide any final thoughts.