Cybersecurity leadership and governance

Module title:

Cybersecurity leadership and governance

Module overview:

The course is designed to address the strategic facets of cybersecurity. It delves into the development and application of robust cybersecurity policies, strategies, and governance frameworks, emphasizing the importance of leadership in the realm of information security. Through the study of ethics, law, and compliance, the curriculum prepares students to navigate the complex landscape of cybersecurity leadership. Students will acquire the skills necessary to spearhead cybersecurity initiatives, adeptly manage risks, and ensure that cybersecurity measures are in concert with both business objectives and regulatory demands.
In this module students will learn:
the intricacies of cybersecurity policies and frameworks, such as ISO/IEC 27001 and NIST.
legal and regulatory compliance, including navigating directives such as the NIS Directive.
advanced strategies for risk management and assessment in various cybersecurity contexts.
the architecture of cybersecurity governance structures and their role in organizational security.
best practices for planning and managing an effective incident response.
ethical considerations that are paramount in cybersecurity decision-making.
strategic planning and budgeting to align cybersecurity efforts with broader business goals.
techniques for building and leading robust cybersecurity teams equipped to tackle current and future challenges.

Literature:

Required readings:
1. Gallotti, C., Ramacciotti, S., Cottafavi, M. (2022). Information security - Edition 2022: Risk management. Management systems. The ISO/IEC 27001:2022 standard. The ISO/IEC 27002:2022 controls, Cesare Gallotti

Supplementary readings:
1. Edwards, J., and Weaver, G. (2024). The Cybersecurity Guide to Governance, Risk, and Compliance (1st ed.). Wiley.