Block
Cyber Education for boards and executives

Aligned with NIS2 art. 20 ; DORA art. 5


Board members and Exectives


Focused on leader's actions

NIS2 Directive

Board Education on Cybersecurity

As required by NIS2 Directive and country laws

Board Education on Cybersecurity as required by NIS2 Directive and country laws

Bring leadership to executives on cybersecurity decision making. Catch-up with essentials and embark with those who have the know-how.

Short education series for Board and executives with four sessions of two hours.

Get a completion certificate and remain aligned with NIS2 Article 20.

Available for in-house sessions in organizations or as open sessions.

Join us
Slide

Certification of accomplishment is available through Solvay Lifelong Learning.

Our Partners

Lead speakers
Professor Georges Ataya

Steve Purser

Marc Vael

Block
Session 1 – CYBERSECURITY CONCERNS
- The evolution of Cybersecurity through the decades
- Enterprises response from inefficient to expensive
- Location of the decision making
- Threats illustrated
- Sources and causes of threats
- Business risks and impact
- Supply Chain vulnerability
Session 2 - THE RISK FACTOR

- Technology risks and impact on Business
- Holes in the cheese
- Enterprise architecture as a strategy
- Relevant Enterprise Response
- Implementing protections and awareness
- Roadmap for a protection
- Frameworks and lessons learnt
- Risks, mitigation projects
- What comes on first?
- Budget considerations and ROI
Session 3 - CYBERSECURITY GOVERNANCE
- Roles across the enterprise
- The CISO function
- The line managers’ action
- Three lines of defence
- Governance Structures: Organisation and accountability
- “C” as in Compliance; “R” as in Risk ; “G” as in Governance
- The seven components of maturity
- Important terms: NIS2, DORA, GDPR, CRA, etc.
- The Certification dilemma
Session 4 – THE LEADERS ACTION
- The leader formal responsibility (NIS2)
- Leader’s sources of knowledge
- Towards a Protection Transformation
- The four-dimension Dashboard
- A Dashboard or a Third line?
- Putting it all together
- Towards a total governance
- Cybersecurity Agenda on Board and executives meeting

NIS 2 - Article 20 – Governance

1. Member States shall ensure that the management bodies of essential and important entities approve the cybersecurity risk-management measures taken by those entities to comply with Article 21...



2. Member States shall ensure that the members of the management bodies of essential and important entities are required to follow training, and shall encourage essential and important entities to offer similar training...



image
image

DORA Article 5 - Governance and Organisation

1.  Financial entities shall have in place an internal governance and control framework that ensures an effective and prudent management of ICT risk, in accordance with  Article 6, in order to achieve a high level of digital operational resilience.



2. The management body of the financial entity shall define, approve, oversee and be responsible for the implementation of all arrangements related to the ICT risk management framework referred to in  Article 6.



3. Financial entities, other than microenterprises, shall establish a role in order to monitor the arrangements concluded with ICT third-party service providers on the use of ICT services, or shall designate a member of senior management as responsible for overseeing the related risk exposure and relevant documentation.



4. Members of the management body of the financial entity shall actively keep up to date with sufficient knowledge and skills to understand and assess ICT risk and its impact on the operations of the financial entity, including by following specific training on a regular basis, commensurate to the ICT risk being managed.



Slide

Professor Georges Ataya founded and acts as academic Director of the Executive Master in Cybersecurity Management at Solvay Lifelong learning (ULB). The six modules deliver the body of knowledge for Senior Cybersecurity Professionals.

Slide

EU funded projects

Professor Georges Ataya, Solvay Lifelong learning (ULB), and Ataya & partners SRL are involved in the following European funded projects for spreading cybersecurity education, awareness and knowledge.

Involved in the CyberHubs project launched by Digital EUROPE, co-funded by the Erasmus+ Programme of the European Union and leaded by Agoria at the Belgian level.  It aims to improve the quality and relevance of education and training programmes in cybersecurity and to provide an innovative methodology for anticipating skills needs.

Digital4Security, a €20 million EU-funded project launched in October 2023, equips European SMEs with cybersecurity expertise through collaboration among 35 partners from 14 EU countries. The program focuses on protecting economic prosperity by offering academic accreditation and industry certification to professionals, managers, and business leaders, aligning with ENISA's European Cybersecurity Skills Framework (ECSF) to enhance the security and success of European businesses.

COcyber is a 2-year project that aims to enhance the exchange, coordination, and collaboration between the cybersecurity civilian and defence spheres. COcyber will maximise the project impact by developing toolkits, ready-to-use material, and flagship events and engaging a group of ambassadors and renowned experts on its advisory board.

hidden