Proposed pathway · Enrolment by enquiry
CISO & Security Governance Lead
Executive decisions, resilience, third-party risk and accountable programmes · 80–120h proposed; board scenario and a defensible 90-day programme.
What you will be able to demonstrate
- Identify critical services and assign risk and control owners
- Build a risk and decision register with explicit acceptance authority
- Prioritize architecture, resilience and supplier-security work
- Lead an incident tabletop and test executive communications
- Defend a 90-day budget and evidence-based management dashboard
Evidence from the practical assessment
- Service dependency map and risk register
- Board decision memo and 90-day roadmap
- Supplier and incident governance artefacts
- Recovery exercise decision log
- Executive oral defense with a control-effectiveness review
How practical competence is assessed
Candidates resolve competing demands between business service availability, security exposure and limited resources; every executive decision has an owner and evidence.
How this connects to customer work
This route develops governance competence; it does not authorize independent audit merely by attendance.
Download sample working documents
Training and assessment are separate from independent certification. Published course durations and assessment designs are programme proposals subject to final scheduling and scheme approval.