About the course
If you own and work with cyber risk but are not a technical specialist, this one-day course is for you. It explains the Cyber Assessment Framework (CAF) in plain English and gives you the confidence to question your organisation’s assessment, make sound risk decisions and drive improvement.
Who it’s for
Senior risk owners, SIROs, board and audit committee members, directors, service owners and non-technical managers in central government, local government and the wider public sector.
Learning outcomes
By the end of the course, delegates will be able to:
Explain the purpose and structure of the CAF and how it applies to their organisation.
Describe their own accountability for cyber risk, and how it differs from the roles of the SIRO, CISO and technical teams.
Challenge a CAF self-assessment by testing its scope, evidence and ratings.
Make and record proportionate risk decisions, including when to accept, treat or escalate a risk.
Prioritise improvement actions and make the case for resources to the board.
Leave with a personal action plan for their role.
Effectology is an independent training provider. This course is not endorsed by the National Cyber Security Centre. It draws on public sector information licensed under the Open Government Licence v3.0.