Managing Cyber Risk for Non-Technical Managers
3 days|Delivered on request
This programme is for the person accountable for the work rather than the person doing it. It covers third party risk and key risk indicators from the position of someone who must review, approve and answer for the output. Managers carry this because boards are being asked to evidence oversight, not merely assert it, and the accountability does not delegate cleanly. Delegates leave able to work confidently with control design, internal audit interface and compliance monitoring in their own organisation.
What delegates leave able to do
- Spot where control design is failing before it becomes a finding, measured against the three lines model
- Bring internal audit interface into line with current good practice
- Put compliance monitoring on a footing they can defend to a reviewer
- Take ownership of risk identification rather than escalating it
What the course covers
- Third party risk
- Key risk indicators
- Control design
- Internal audit interface
- Compliance monitoring
- Risk identification
- Business continuity planning
Who should attend
- business continuity coordinators
- heads of risk
- governance and assurance practitioners
- risk champions in operating units
- internal auditors
