Cybersecurity and ITCybersecurity Governance and Incident Response
A board is accountable for cyber risk it cannot assess directly, and the first time most boards test their arrangements is during an incident, at the point when decisions are expensive and information is thin. This course prepares both layers. Delegates work through governance structure, roles and the reporting that lets a board oversee something technical, risk appetite for cyber expressed in terms a board can use, and the assurance that tells them whether controls work. Incident response follows: the plan, the roles, and the decisions that belong to executives rather than to technical staff, including whether to disconnect, whether to pay, and when to notify. Regulatory and customer notification obligations are covered. Communication during an incident is addressed. The course closes on exercising the plan and on learning afterwards.
Course objectives
- Structure governance so a board can oversee something technical
- Express cyber risk appetite in terms a board can use
- Obtain assurance that controls actually work
- Separate executive decisions from technical ones during an incident
- Decide on disconnection, payment and notification under pressure
- Meet regulatory and customer notification obligations
- Exercise the plan and learn from an incident afterwards
Who should attend
- Chief information security officers and IT security managers
- Risk and compliance officers
- Internal audit and governance professionals
- IT directors and infrastructure managers
- Legal and corporate communications officers
Course outline
- 01Tested for the first time during an incident
- 02Governance structure and roles
- 03Board level reporting on a technical risk
- 04Cyber risk appetite
- 05Assurance that controls work
- 06The incident response plan and roles
- 07Executive decisions: disconnect, pay, notify
- 08Notification duties, communication and exercising the plan
Scheduled sessions
| Dates | Venue | Format | Price | Register |
|---|---|---|---|---|
| 12 to 14 October 2026 | Port Louis, Mauritius | Classroom | USD 995 per delegate | Register Now |
| 19 to 21 October 2026 | Online | Online | R6,500 per delegate | Register Now |
| 28 to 30 December 2026 | Pretoria, South Africa | Classroom | R14,950 per delegate | Register Now |