Organizational Effectiveness: Governance, Risk Management and Compliance

Course considers the roles of the Board of Directors, the Audit Committee, the Risk Committee, and the Chief Information Security Officer (CISO) within the governance and overall organizational structures. Topics include enterprise risk management (ERM), policy development under ISO 27001 and the NIST Cybersecurity Framework, derivation of operating procedures, leadership, and the business engagement model. The course specifically addresses threat assessment, mitigation strategies, residual vulnerability, incident response, awareness programs, employee training and awareness, drilling, and tabletop exercises. The course will also identify risk, due diligence and mitigation strategies in mergers and acquisitions settings. Additionally, the course covers compliance monitoring, business continuity planning, risk transfer through the purchase of cyber insurance for both data breach and infrastructure losses, and concepts of resiliency.