Masterclasses
Security & Risk
Executive Management of Cyber Security
As a board member, a mortal threat to your company is a cyber security breach. We will prepare you to ask the right questions and evaluate the effectiveness of your programs, to understand and reduce the risk to your company and the cyber risks you face.
Result: A plan to manage board communications, ask the right questions as leaders, evaluate the effectiveness of your programs (Cyber Maturity Analysis), and implement a governance program that is flexible and adaptable to the cyber threats tailored to your organization. Put you in a defensible state when the inevitable happens.
Data Breaches and Cyber Resilience
Strategies, tactics and countermeasures to today’s ransomware and other sophisticated cyber threats.
Result: A better prepared organization with a greater understanding of the specific operational cyber risks they face. As a result, you are armed with the knowledge to create and plan to implement the necessary countermeasures for risk mitigation.
Controlling Cyber Risks from 3rd Parties and Outsourcing ICT Operations
Recognising risks to your organizations resulting from the growing trends of cloud computing, outsourcing ICT operations, and increasing dependence on 3rd parties.
Result: Learn to review the risk strategies prior to making outsourcing decisions and understand how to better manage risks in this area.
We’ve been here before, although the circumstances are always different, learning from the past helps us improve the current situation with the pandemic and its results. We will discuss key activities of organisations that navigate successfully so that you emerge from the current situation stronger into a new world.
Results: Leadership with confidence to navigate the day to day uncertainties, to care for their employees and customers and to plan in a situation of constant change and misinformation.
LEADING THROUGH UNCERTAINTY
BECOMING RESILIENT
Whether your business continuity plan (BCP) is fit for purpose or not, in the crisis or not, developing and redefining the BCP is the responsibility of the senior business leaders. Like many exercises, the question is either ‘Where do we start?’ or ‘What do we do next?’.
Results: The senior leadership team will have a shared understanding of terminology, how to put together the relevant committees and a clear plan to move to the next step in a timely manner.
STEP 1:
Identify your vulnerabilities
Introduction to Business Continuity Planning
The most successful BCP start with a clear and agreed strategy, a framework to develop the plan and an agreement of the risks to be addressed. When this step bypassed, the resulting BCP is usually not fit for purpose.
Results: A vision of organisational resilience led by the CEO, backed up with a high-level plan that includes the initial clear communications to begin to engage staff.
Defining the BCP strategy
Taking the BCP from a vision to a plan requires the engagement of leaders and senior staff in multiple planned workstreams. Success comes from the introduction of the BCP framework and approach and the training of the staff to use the framework so everyone communicates well.
Results: Confirmation of the outcomes required from the BCP communicated to all departments, the introduction and training in the framework and the increased communication that increases staff engagement with the development and later use of the BCP.
STEP 2:
Develop your strategy
From Strategy to tactics
During the developments of the responses to various risks, it’s important that departments don’t limit their plans by ‘group think’. As well as ensuring that the workstreams progress as agreed, external people provide a sounding board, domain expertise from outside the organisation and checkpoints to encourage progress.
Results: A programme that completes on time, that combines inner knowledge and external expertise and delivers plans that are ready for the first scenario testing.
Reviewing the workstream progress
While all executed BCPs should have the ability to learn from each incident, a failure point of many BCP is that they are inadequately tested until a real disaster happens. We see this often with cybersecurity breaches. Mature organisations run these tests one or more times every year.
Results: The organisation understands how to build and test BCP plans and how to improve the response each time.