1. Target Audience
Senior risk owners, SIROs, board and audit committee members, directors, service owners and non-technical managers in central government, local government and the wider public sector. If you own cyber risk but aren’t a technical specialist, this course is for you.

2. Duration
1 day (5.5 hours of teaching), plus a short e-learning module to complete beforehand.

3. Delivery Mode
Virtual, at your workplace or off-site. Closed courses can be tailored to your organisation and sector.

4. Aims
The course explains the Cyber Assessment Framework (CAF) in plain English. It gives you the confidence to question your organisation’s assessment, make sound risk decisions and drive improvement. You practise those decisions through a realistic public sector scenario.

5. Learning Outcomes
By the end of the course, delegates will be able to:

1. Explain the purpose and structure of the CAF and how it applies to their organisation.

2. Describe their own accountability for cyber risk, and how it differs from the roles of the SIRO, CISO and technical teams.

3. Challenge a CAF self-assessment by testing its scope, evidence and ratings.

4. Make and record proportionate risk decisions, including when to accept, treat or escalate a risk.

5. Prioritise improvement actions and make the case for resources to the board.

6. Leave with a personal action plan for their role.

6. How to Buy
Available to public sector buyers through the Learning and Training Services Dynamic Purchasing System (RM6219). Get in touch to book.

Effectology is an independent training provider. This course is not endorsed by the National Cyber Security Centre. It draws on public sector information licensed under the Open Government Licence v3.0.