Cybersecurity & Information Systems Governance
About This Programme
This programme addresses the growing need for cybersecurity awareness and information systems governance across institutional, corporate, and development settings. Participants learn to assess digital risks, implement security controls, manage incidents, and establish governance frameworks that protect organisational data and systems.
The course covers foundational cybersecurity concepts alongside practical governance topics: access control policies, data classification, incident response planning, regulatory compliance (including GDPR and sector-specific standards), and security awareness training for staff. Case studies draw from real-world breaches and institutional security failures.
By completion, learners can conduct basic risk assessments, develop information security policies, and advise leadership on technology governance decisions.
Programme Syllabus
Cybersecurity Fundamentals
Threat landscape, attack vectors, core security principles (CIA triad), and the business case for cybersecurity.
Information Systems Governance
IT governance frameworks, roles and responsibilities, policy development, and aligning IT to institutional objectives.
Risk Assessment & Management
Identifying digital risks, risk registers, vulnerability assessments, and risk treatment strategies.
Access Control & Data Protection
Identity management, role-based access, data classification, encryption, and privacy regulations.
Incident Response & Business Continuity
Incident response plans, communication protocols, recovery procedures, and business continuity planning.
Security Awareness & Organisational Culture
Training staff, phishing prevention, social engineering awareness, and building a security-conscious culture.
Compliance, Audit & Continuous Improvement
Regulatory requirements, security audits, metrics, and maintaining governance standards over time.