Back

Cursos

ENISA Profiles » Chief Information Security Officer (CISO)

Value:  2180 €

Timetable:

Monday, Wendsday and Thrusday from 18:00 H to 22:00 H

Format: Online

N. Hours: 30 H

During: 4 weeks

  • Alternative Title(s)
  • Cybersecurity Programme Director
  • Information Security Officer (ISO)
  • Information Security Manager
  • Head of Information Security
  • IT/ICT Security Officer
  • Summary Statement

Manages an organisation’s cybersecurity strategy and its implementation to ensure that digital systems, services and assets are adequately secure and protected.

  • Mission

Defines, maintains and communicates the cybersecurity vision, strategy, policies and procedures. Manages the implementation of the cybersecurity policy across the organisation. Assures information exchange with external authorities and professional bodies.

  • Deliverable(s)
  • Cybersecurity Strategy
  • Cybersecurity Policy
  • Main Task(s)
  • Define, implement, communicate and maintain cybersecurity goals, requirements, strategies, policies, aligned with the business strategy to support the organisational objectives
  • Prepare and present cybersecurity vision, strategies and policies for approval by the senior management of the organisation and ensure their execution
  • Supervise the application and improvement of the Information Security Management
    System (ISMS)
  • Educate senior management about cybersecurity risks, threats and their impact to the organisation
  • Ensure the senior management approves the cybersecurity risks of the organisation
  • Develop cybersecurity plans
  • Develop relationships with cybersecurity-related authorities and communities
  • Report cybersecurity incidents, risks, findings to the senior management
  • Monitor advancement in cybersecurity
  • Secure resources to implement the cybersecurity strategy
  • Negotiate the cybersecurity budget with the senior management
  • Ensure the organisation’s resiliency to cyber incidents
  • Manage continuous capacity building within the organisation
  • Review, plan and allocate appropriate cybersecurity resources
  • Key Skill(s)
  • Assess and enhance an organisation’s cybersecurity posture
  • Analyse and implement cybersecurity policies, certifications, standards, methodologies and frameworks
  • Analyse and comply with cybersecurity-related laws, regulations and legislations
  • Implement cybersecurity recommendations and best practices
  • Manage cybersecurity resources
  • Develop, champion and lead the execution of a cybersecurity strategy
  • Influence an organisation’s cybersecurity culture
  • Design, apply, monitor and review Information Security Management System (ISMS) either directly or by leading its outsourcing
  • Review and enhance security documents, reports, SLAs and ensure the security objectives
  • Identify and solve cybersecurity-related issues
  • Establish a cybersecurity plan
  • Communicate, coordinate and cooperate with internal and external stakeholders
  • Anticipate required changes to the organisation’s information security strategy and formulate new plans
  • Define and apply maturity models for cybersecurity management
  • Anticipate cybersecurity threats, needs and upcoming challenges
  • Motivate and encourage people
  • Key Knowledge
  • Cybersecurity policies
  • Cybersecurity standards, methodologies and frameworks
  • Cybersecurity recommendations and best practices
  • Cybersecurity related laws, regulations and legislations
  • Cybersecurity-related certifications
  • Ethical cybersecurity organisation requirements
  • Cybersecurity maturity models
  • Cybersecurity procedures
  • Resource management
  • Management practices
  • Risk management standards, methodologies and frameworks
  • e-Competences (from e-CF)

A.7. Technology Trend Monitoring (Level 4)
D.1. Information Security Strategy Development (Level 5)
E.3. Risk Management (Level 4)
E.8. Information Security Management (Level 4)
E.9. IS-Governance (Level 5)

Documentação

Para mais informações, contacte-nos:

    * Campo obrigatório