Chief Information Security Officer Training | Information Security in Bandar Seri Begawan

Chief Information Security Officer Training Course Outline

Domain 1: Governance and Risk Management

Module 1: Governance

• Introduction to Governance
• Information Security Governance

Module 2: Information Security Management Structure

• Introduction
• Sizing
• Management Structure

Module 3: Principles of Information Security

• Principles of Information Security
• CIA Triad
• Security Vulnerabilities, Threats, Risks, and Exposures
• Cyberattack Elements
• Defence-in-depth

Module 4: Risk Management

• Risk Management Programme
• Best Practice Frameworks for Risk Management

Module 5: Management and Technical Information Security Elements

• Management and Technical Information Security Elements
• Security Programme Plan
• Security Policies, Standards, and Guidelines
• Asset Security
• Identity and Access Management
• Security Engineering
• Security Operations
• Software Development Security
• Security Assessments and Testing
• Security Training and Awareness
• Business Continuity and Disaster Recovery

Module 6: Compliance

• Compliance
• Compliance Team
• Compliance Management

Module 7: Privacy

• Privacy
• Privacy Impact Assessment
• Privacy and Security

Module 8: Laws and Regulatory Drivers

• Laws and Regulatory Drivers
• Federal Information Security Modernisation Act
• Who Does FISMA Apply to?
• How Does Compliance Impact an Organisation?
• Defence Federal Acquisition Regulation Supplement 252.204-7012
• Who Does DFARS 252.204-7012 Apply to?
• How Does Compliance Impact an Organisation?
• Clinger-Cohen Act
• Who Does the Clinger-Cohen Act Apply to?
• How Does Compliance Impact an Organisation?
• Who Does PCI DSS Apply to?
• How Does Compliance Impact an Organisation?
• Privacy Act of 1974
• Who Does the Privacy Act Apply to?
• GRAMM-LEACH-BLILEY ACT
• Who Does the Gramm-Leach-Bliley Act Apply to?
• SARBANES-OXLEY ACT
• Who Does SOX Apply to?

Module 9: Standards and Frameworks

• ISO/IEC 27000 Series
• ISO/IEC 27001
• NIST Cybersecurity Framework
• Federal Information Processing Standards
• Privacy Shield
• COBIT

Module 10: Information Security Trends and Best Practices

• Information Security Trends and Best Practices
• Open Web Application Security Project
• Cloud Security Alliance
• Centre for Internet Security

Module 11: Ethics

• Introduction to Ethics

Domain 2: Information Security Controls, Compliance, and Audit Management

Module 12: Information Security Controls

• Control Fundamentals
• Control Frameworks

Module 13: Information Security Control Life Cycle Framework

• NIST Risk Management Framework
• NIST Cybersecurity Framework
• ISO/IEC 27000

Module 14: Information Security Control Life Cycle

• Information Security Control Life Cycle
• Risk Assessment
• Design
• Implementation
• Assessment
• Monitoring

Module 15: Exploring Information Security Control Frameworks

• Exploring Information Security Control Frameworks
• NIST SP 800-53
• NIST Cybersecurity Framework
• ISO/IEC 27002
• CIS Critical Security Controls

Module 16: Auditing for the CISO

• Audit Management
• Audit Process
• Control Self-assessments
• Continuous Auditing
• Specific Types of Audits and Assessments

Domain 3: Security Programme Management and Operations

Module 17: Security Programme Management

• Security Areas of Focus
• Security Streams of Work
• Security Projects

Module 18: Security Programme Budgets, Finance, and Cost Control

• Establishing the Budget
• Managing and Monitoring Spending
• Security Programme Resource Management: Building the Security Team

Module 19: Project Management

• Project Management Fundamentals
• Phases of Project Management
  • Initiating
  • Planning
  • Executing
  • Monitoring and Controlling
  • Closing

Domain 4: Information Security Core Competencies

Module 20: Malicious Software and Attacks

• Malware
• Scripting and Vulnerability-Specific Attacks

Module 21: Social Engineering

• Types of Social Engineering Attacks
• Why Employees are Susceptible to Social Engineering?
• Social Engineering Defences

Module 22: Asset Security

• Asset Inventory and Configuration
• Secure Configuration Baselines
• Vulnerability Management
• Asset Security Techniques

Module 23: Data Security

• Data at Rest
• Data in Transit
• Data in Use
• Data Life Cycle

Module 24: Identity and Access Management

• Identity and Access Management Fundamentals
• Identity Management Technologies
• Authentication Factors and Mechanisms
• Access Control Principles
• Access Control Models
• Access Control Administration
• Identity and Access Management Life Cycle

Module 25: Communication and Network Security

• WANs and LANs
• IP Addressing
• Network Address Translation
• Network Protocols and Communications
• Wireless
• Network Technologies and Defences

Module 26: Cryptography

• Cryptography
• Cryptographic Services
• Symmetric, Asymmetric, And Hybrid Cryptosystems
• Hash Algorithms
• Message Authentication Codes
• Digital Signatures

Module 27: Cloud Security

• Cloud Security
• Cloud Deployment Models
• Cloud Service Models
• Cloud Security Risks and Assurance Levels
• Cloud Security Resources

Module 28: Physical Security

• Making Security Decisions
• Physical Security Threats
• Physical Security Program Planning
• Physical Security Resources
• Physical Security Controls
• Physical Security Auditing and Measurement

Module 29: Personnel Security

• Personnel Security
• Software Development Security
• Integrating Security into the SDLC
• Security SDLC Roles and Responsibilities
• Software Vulnerabilities
• Software Vulnerability Analysis and Assessments

Module 30: Forensics, Incident Handling, and Investigations

• Relevant Law
• Logging and Monitoring
• Incident Response and Investigations
• Forensics and Digital Evidence

Module 31: Security Assessment and Testing

• Introduction to Security Assessment and Testing
• Vulnerability Assessments
• Penetration Testing
• Regulatory Compliance Assessments
• Security Programme Assessments

Module 32: Business Continuity and Disaster Recovery

• Introduction to Business Continuity and Disaster Recovery
• Continuity Planning Initiation
• Business Impact Analysis
• Identify Preventive Controls
• Develop Recovery Strategies and Solutions
• Develop the Plan
• Test the Plan
• Maintain the Plan

Domain 5: Strategic Planning, Finance, Procurement, and Vendor Management

Module 33: Strategic Planning

• Introduction to Strategic Planning
• Organisational Strategic Planning
• Organisational Strategic Planning Teams
• Strategic Planning Process

Module 34: Making Security Decisions

• Introduction to Making Security Decisions
• Enterprise Architecture

Module 35: Financial Management

• Financial Management
• Accounting and Finance Basics
• Information Security Annual Budget

Module 36: Procurement and Vendor Management

• Overview of Procurement and Vendor Management
• Procurement Core Principles and Processes
• Types of Contracts
• Scope Agreements
• Third-party Vendor Risk Management

Who Should Attend this Chief Information Security Officer Training?

This Chief Information Security Officer Training is suitable for experienced IT and security professionals who want to strengthen knowledge of governance, risk, compliance, security operations, and strategic security management. The following professionals can benefit from this course:

• Security Consultants
• IT Security Engineers
• Chief Information Security Officers (CISOs)
• Network Architects
• IT Consultants
• Risk Managers
• Compliance Officers

Prerequisites for the Chief Information Security Officer Training

There are no formal prerequisites to attend this Chief Information Security Officer Training. However, prior experience or knowledge in IT, cyber security, governance, or risk management will help delegates engage effectively with the course content.

Chief Information Security Officer Training Course Overview

Chief Information Security Officer Training helps delegates understand the strategic, operational, and governance responsibilities involved in managing organisational information security. It covers governance, risk, compliance, security controls, operations, finance, procurement, and strategic planning.

Delegates develop skills in evaluating security risks, interpreting compliance requirements, overseeing security controls, and supporting security programmes. They also strengthen strategic decision-making across finance, vendor management, and organisational security.

This 3-Day course helps delegates build a structured understanding of senior information security responsibilities. They will be better equipped to contribute to governance, risk, operational oversight, and strategic security decisions.

Chief Information Security Officer Training Course Objectives

• To understand information security governance and management principles
• To evaluate risk management and compliance requirements
• To understand security controls, architecture, and operational security
• To explore cryptography, IAM, network security, and cloud security
• To understand security assessment, incident response, and business continuity
• To develop knowledge of strategic planning, budgeting, procurement, and vendor management

Learning Outcomes of this Chief Information Security Officer Training

Upon completing this CISO Training, delegates will understand how governance, risk, compliance, security operations, and strategic planning contribute to information security management. They will be better equipped to support senior security decisions and oversee organisational security priorities.

What’s Included in this Chief Information Security Officer Training?

• World-Class Training Sessions from Experienced Instructors
• Interactive Learning with 24*7 Support
• Digital Delegate Pack