Cyber Security for Leaders

Introduction

This Master of Management course (15 ECTS), is designed to be a part in a 90 ESCTS Executive Master of Management degree specializing in Security management and Cultural Understanding.

Digitalization is among the highest political priorities in many countries. In Norway digitalization is seen as part of the strategy to overcome the challenges of the wide geographic distribution of the population, and enable equal services throughout the country. The political push towards digitalization for citizens, businesses and public services must be accompanied with precautions and strategies to create resilience against threats and attacks in cyberspace. Resilience means to protect your system, detect malware at the earliest possible occasion, and respond to incidents so that normal operation can be continued as soon as possible after a breach. In short, follow the principle “Protect, Detect and Respond”.

A high degree of resilience can be achieved via aware decision makers, deep and sound risk analysis, and teams which can balance the trade-off between vulnerability and overprotection. Moreover, the professional management and implementation of organizational and technical innovations in the context of cyber security involves managing across multiple stakeholders and networks. In short, cyber security leaders need to support such strategies and balancing processes, while consulting society and decision makers as part of the endeavor.

Course content

Module 1: Setting the Scene for a Secure Digitalized World

• Standards, Frameworks and Regulations
• Introduction to Networks
• Digitalization and secure Digitalization
• Execution, Control and Top Management Interaction

• Cases Studies and recent examples
   

Module 2: Risk Management and Audit

• Vulnerabilities, Threats, and Business Impact
• Risk Management and Audit
• Cyber Insurances
   

Module 3: Mastering Digital Incidents and Crises

• Incident Response and Readiness
• Investigations and Digital Forensic Readiness
• Business Continuity Management and Disaster Recovery Planning
• The Value of Trust Networks: CERT, Information Sharing Communities, Exchange with National Services and Supportive Function
• Collaboration with authorities