Skip to content

Cybersecurity Leadership for Managers Training Course

Prepares managers to lead cybersecurity as business risk, set clear accountabilities, build a security-aware culture and lead through cyber incidents.

CYIS · Cybersecurity & Information SecurityAll Levels#2421ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Course Overview

The Cybersecurity Leadership for Managers Training Course equips managers, department heads, and executives with the knowledge, confidence, and practical tools needed to lead cybersecurity as a business priority, make informed decisions about cyber risk, build a security-conscious culture in their teams, and lead effectively before, during, and after a cyber incident. Cyber threats such as ransomware, phishing, business email compromise, supply chain attacks, insider threats, and AI-enabled attacks now affect every ministry, government entity, bank, energy and utility company, healthcare system, and corporation. Most successful attacks exploit people, processes, and decisions rather than technology alone, which is why cybersecurity can no longer be left solely to the IT or security team. Regulators, boards, and customers expect managers at every level to understand cyber risk and play an active role in managing it. The course covers cybersecurity leadership from risk understanding to crisis response, without requiring a technical background. Participants learn the current threat landscape and how attacks unfold, cyber risk as business risk, cybersecurity governance, accountability, and the roles of the board, executives, managers, and the security function, and the essentials of recognized cybersecurity frameworks and national regulatory and data protection requirements. The program then addresses cyber risk assessment and prioritization, introductory cyber risk quantification, cybersecurity strategy and investment decisions, managers' responsibilities for access, data handling, and secure processes, third-party and supply chain cyber risk, cloud, remote work, and AI-related risks, and building a security culture and reducing human risk. Participants also examine incident response leadership, crisis decision making including ransomware scenarios, communication with staff, customers, regulators, and media, business continuity and cyber resilience, cybersecurity metrics and reporting to executives and boards, and building and retaining cybersecurity capability. The course is delivered through real-world incident case studies, cyber risk workshops, decision-making exercises, and an executive cyber crisis tabletop exercise. Participants leave with a cyber risk register template for business units, a manager's cybersecurity responsibilities checklist, a third-party cyber risk questionnaire, a cyber incident leadership playbook, and a cybersecurity dashboard for management reporting.

Learning Objectives

  • Analyze the current cyber threat landscape and how attacks affect organizations on Day 1.
  • Explain cyber risk as business risk and its impact on operations, finances, reputation, and compliance.
  • Apply cybersecurity governance principles and define accountabilities for boards, executives, managers, and security functions.
  • Explain the essentials of recognized cybersecurity frameworks and national regulatory and data protection requirements.
  • Assess and prioritize cyber risks within their area of responsibility and understand introductory cyber risk quantification.
  • Make informed cybersecurity strategy and investment decisions based on risk and business value.
  • Fulfill managers' responsibilities for access management, data handling, and secure business processes.
  • Manage third-party and supply chain cyber risks and the risks of cloud, remote work, and AI adoption.
  • Build a security-conscious culture and reduce human cyber risk in their teams.
  • Lead effectively during cyber incidents, including crisis decision making and ransomware scenarios.
  • Communicate during cyber incidents with staff, customers, regulators, and media and support cyber resilience and business continuity.
  • Use cybersecurity metrics and reporting to oversee performance and build cybersecurity capability by the end of Day 5.

Who Should Attend

This course is designed for managers, department heads, directors, and executives in all business functions who are responsible for teams, processes, data, or systems. It is also relevant for IT managers and newly appointed security leaders who need to communicate cyber risk to the business, risk, compliance, and internal audit managers, HR and procurement leaders, and board and committee members seeking a practical understanding of cybersecurity. It is particularly valuable for professionals in ministries, government entities, and public authorities, banks, insurance companies, and financial institutions, oil and gas, energy, water, and utility companies, telecommunications and technology providers, healthcare and education institutions, and other critical infrastructure and large private organizations. No technical background is required.

Learning Outcomes

  • Explain today's main cyber threats in business terms.
  • Understand how cyber incidents affect their organization.
  • Know their accountabilities for cybersecurity as managers.
  • Understand the frameworks and regulations that shape cybersecurity.
  • Identify and prioritize cyber risks in their area.
  • Make better decisions about cybersecurity investments.
  • Apply secure practices in managing access, data, and processes.
  • Manage cyber risks from vendors, cloud, remote work, and AI.
  • Build a team culture that reduces human cyber risk.
  • Lead calmly and effectively during a cyber incident.
  • Communicate clearly during a cyber crisis.
  • Use cybersecurity metrics to oversee and improve performance.

Course Outline

Course Outline:

Day 1

The Cyber Threat Landscape and Cyber Risk as Business Risk

  • Current cyber threats: ransomware, phishing, business email compromise, supply chain attacks, insider threats, and AI-enabled attacks
  • How cyber attacks unfold
  • Cyber risk as business risk and lessons from major incidents
  • The business impact of cyber incidents
  • Practical application: participants analyze major cyber incident case studies and identify leadership lessons
Day 2

Governance, Frameworks, and Regulation

  • Cybersecurity governance and accountabilities of boards, executives, managers, and security functions
  • Essentials of recognized cybersecurity frameworks
  • National regulatory and data protection requirements
  • Policies, standards, and the manager's role in compliance
  • Practical application: participants map cybersecurity accountabilities and compliance obligations for their area
Day 3

Managing Cyber Risk and Making Decisions

  • Cyber risk assessment and prioritization for business units
  • Introduction to cyber risk quantification
  • Cybersecurity strategy and investment decisions
  • Third-party and supply chain cyber risk and risks of cloud, remote work, and AI
  • Practical application: participants build a cyber risk register for a business unit and prioritize investments
Day 4

Security Culture and Human Risk

  • Managers' responsibilities for access, data handling, and secure processes
  • Building a security-conscious culture
  • Reducing human cyber risk and social engineering
  • Building and retaining cybersecurity capability
  • Practical application: participants design a security culture plan and a manager's cybersecurity checklist for their team
Day 5

Incident Leadership, Crisis Communication, and Reporting

  • Incident response leadership and crisis decision making
  • Ransomware decisions and their implications
  • Communication with staff, customers, regulators, and media and cyber resilience
  • Cybersecurity metrics and reporting to executives and boards
  • Final workshop: participants take part in an executive cyber crisis tabletop exercise and present lessons and actions

Upcoming Dates

Selected date

Kuala Lumpur · 1 – 5 Feb 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
RomeScheduled
2 – 6 Nov 2026€7,000—
SalalahScheduled
2 – 6 Nov 2026€6,300—
SingaporeScheduled
9 – 13 Nov 2026€8,000—
TunisiaScheduled
16 – 20 Nov 2026€4,300—
ViennaScheduled
23 – 27 Nov 2026€6,400€5,760until 2 Nov
AmmanScheduled
29 Nov – 3 Dec 2026€4,000€3,600until 9 Nov
AmsterdamScheduled
7 – 11 Dec 2026€6,000€5,400until 16 Nov
BakuScheduled
14 – 18 Dec 2026€5,300€4,770until 23 Nov
BarcelonaScheduled
21 – 25 Dec 2026€6,000€5,400until 30 Nov
CairoScheduled
21 – 25 Dec 2026€3,800€3,420until 30 Nov
CasablancaScheduled
28 Dec 2026 – 1 Jan 2027€4,700€4,230until 7 Dec
DohaScheduled
4 – 8 Jan 2027€4,700€4,230until 14 Dec
DubaiScheduled
10 – 14 Jan 2027€4,700€4,230until 21 Dec
GenevaScheduled
18 – 22 Jan 2027€7,300€6,570until 28 Dec
IstanbulScheduled
25 – 29 Jan 2027€5,300€4,770until 4 Jan
Kuala LumpurScheduled
1 – 5 Feb 2027€4,700€4,230until 11 Jan
LisbonScheduled
8 – 12 Feb 2027€6,000€5,400until 18 Jan
LondonScheduled
8 – 12 Feb 2027€5,800€5,220until 18 Jan
MadinahScheduled
15 – 19 Feb 2027€4,800€4,320until 25 Jan
MadridScheduled
22 – 26 Feb 2027€6,000€5,400until 1 Feb
MakkahScheduled
1 – 5 Mar 2027€4,800€4,320until 8 Feb
ManamaScheduled
8 – 12 Mar 2027€5,300€4,770until 15 Feb
MarrakeshScheduled
15 – 19 Mar 2027€4,700€4,230until 22 Feb
MilanScheduled
22 – 26 Mar 2027€7,000€6,300until 1 Mar
MunichScheduled
22 – 26 Mar 2027€6,000€5,400until 1 Mar
MuscatScheduled
29 Mar – 2 Apr 2027€6,300€5,670until 8 Mar
OnlineScheduled
4 – 8 Apr 2027€2,700€2,430until 15 Mar
ParisScheduled
12 – 16 Apr 2027€6,700€6,030until 22 Mar
RabatScheduled
19 – 23 Apr 2027€4,700€4,230until 29 Mar
RiyadhScheduled
26 – 30 Apr 2027€4,800€4,320until 5 Apr

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.