Leading a security programme and strategy
You build a programme from a security leader's view: alignment with business strategy, maturity assessment, a multi-year roadmap, organisation and budget, governance forums, integrated risk and compliance, and accountability to the board.
Level 501 · 16 lessons · 15 practice labs
Lessons
Strategy
- Aligning with business strategy
- Maturity assessment
- The target state and a three-year roadmap
- Quick task: a one-page security strategy
Organisation and budget
- Designing the security organisation
- Sourcing model: in-house, outsourced, partners
- Budget and business case
- Quick task: a three-year budget model
Governance
- Governance forums and decision rights
- Integrated risk and compliance management
- Programme metrics and showing value
- The security leader's personal liability
- Quick task: a security steering committee charter
Board and transformation
- Working with the board
- Security in mergers and acquisitions
- Capstone: a newly appointed security leader's first 100 days
Practice labs
- Tie security goals to business goals: Match ten security initiatives to the company's five strategic goals and mark any left unlinked.
- Run a maturity assessment: Score the maturity of eight domains from interview notes and evidence and give the reason.
- A one-page security strategy: Write a one-page strategy for Kuzeyyıldızı Kargo with vision, three-year target state, strategic themes and measures.
- Place each function in a sourcing model: Place twelve security functions, with reasons, in the in-house, outsourced or partner model.
- Design the security organisation: Write an organisation design for an eight-hundred-person company showing teams, reporting line and segregation of duties.
- Assess the decision to outsource: Assess a proposal to outsource the monitoring centre by cost, capability, loss of control and exit risk and write a recommendation.
- Classify the budget lines: Classify thirty budget lines as people, technology or services and as capital or operating spend.
- A three-year budget model: Build a budget model with costs spread over the years and the assumptions behind them from the roadmap initiatives.
- Write a business case: Write a business case for an identity management investment with the problem, options, cost, risk reduction and recommended decision.
- Send the decision to the right forum: Send fifteen decisions to the steering committee, risk committee, architecture board or the board of directors.
- A security steering committee charter: Write the charter with purpose, members, decision rights, meeting rhythm and escalation rules.
- Assess personal liability exposure: Review a security leader's role description, reporting line and attestation processes for personal liability and write the protective steps.
- Prepare answers to board questions: Write two-sentence, evidence-based answers to eight questions the board may ask.
- Security due diligence in an acquisition: From the data room documents of a target company, derive the security findings, deal impact and integration risks.
- A first 100 days plan: Write a thirty, sixty and hundred-day plan for a newly appointed security leader covering listening, assessment and early wins.
About this course
You build a programme from a security leader's view: alignment with business strategy, maturity assessment, a multi-year roadmap, organisation and budget, governance forums, integrated risk and compliance, and accountability to the board.
What you will learn
- Strategy
- Organisation and budget
- Governance
- Board and transformation
Prerequisites
You should be experienced in the topics of the same path up to level 401.
Lab environment
Lessons run in your own Kali Linux terminal that opens in the browser. Nothing to install; the lab starts clean in every lesson.
Frequently asked questions
- Is this course right for my level?
- The course is at level 501; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.