Cyber threats are constant. This module introduces cyber security frameworks, essential for organizational resilience. You will learn why frameworks mitigate risk, support compliance, and protect reputation. Explore leading frameworks like NIST, ISO 27001, ISM, CIS Benchmarks, and the Five Safes for data governance. This module provides a critical first step to building a secure, compliant, and future-ready organization. To get the most from this module, focus on understanding how each framework addresses specific security challenges.

An organisation’s cyber resilience is only as strong as the policies that guide its people, processes, and technology. This module teaches you to craft and implement cyber security policy frameworks that align with your organization's risk appetite and drive behavioral change. You will explore the full policy development lifecycle, from drafting to measuring impact. Ensure your policies are compliant, practical, and embedded in daily operations, shaping real-world outcomes. This equips you to build a compliant culture of cyber resilience. To succeed, focus on practical application of policy principles.

Effective cyber security strategy relies on strong technology governance. This module explores implementing a cyber governance framework that supports strategic oversight, ensures compliance, and embeds security across your business. You will learn to build resilient governance structures, from setting up cyber risk oversight committees to establishing audit mechanisms. This equips you with foundations to embed governance for secure, informed decision-making. For best results, consider how these structures apply to your organization.

A well-defined cyber security strategy is not just a technical necessity, it’s a business enabler. It aligns security initiatives with organisational goals, anticipates future risks, and builds trust with customers, regulators, and stakeholders. This module teaches you to craft a strategic cyber roadmap that supports business outcomes, optimizes resources, and prioritizes resilience. You will assess gaps, conduct threat modeling, and develop actionable plans for measurable progress. By the end, you will lead or support cyber strategy development, earning executive support and delivering customer value. Position your organization to adapt and thrive. For practical application, consider a real-world scenario for your roadmap.