Chief Information Security Officer (CISO / ISO) Roles and Responsibilities

Chief information security officer (CISO or ISO) is the senior-level executive within an organization responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. The CISO directs staff in identifying, developing, implementing, and maintaining processes across the enterprise to reduce information and information technology (IT) risks. They establish appropriate standards and controls, direct the establishment and implementation of policies and procedures, manage security technologies and respond to incidents. The CISO is also responsible for information-related compliance.

Instead of waiting for a data breach or security incident, the CISO stays vigilant to new threats and actively works to prevent them from occurring. The CISO works with other executives across different departments to ensure that security systems are working smoothly to reduce the organization’s operational risks in the face of a security attack.

Rise in security threats and regulatory requirement has created a huge demand for CISO in financial institutions and large scale or medium enterprise where technology plays major role in day to day activity or business processes. Nepal Rastra Bank has also mandated financial institutions to appoint an Information Security Officer.

Growth Leadership Academy in association with Rigo Technology is conducting 30 Hours course on CISO Roles and Responsibilities which will be highly engaging and practical.

Target Audience

IT Professionals, Audit Professional, Risk and Compliance Practitioners

Objective

This training will prepare an IT professional to discharge his or her duty of CISO in the following areas:

• Develop Enterprise wide Security Programs
• Identify, Report and Control Incidents
• Manage and Train Security Staff
• Monitor Threats and Take Preventive Measures
• Communicate Continuously with the Board and Employees

Methodology

• Classroom Presentation
• One to one interaction
• Group activities
• Examples
• Case studies

Course Outline

• Risk Management
• Security Management
• Identification and Authentication
• Access Control
• Operations Security
• Vulnerability Assessments
• Cryptography and Hashing
• Network Connections
• VPNs, and Wireless
• Software Development Security
• Database Security and System Development
• Malware and Software Attacks
• Business Continuity and Disaster Recovery
• Incident Management
• Physical Security

Training Fees

NRs. 60,000 /- + VAT– includes fee, stationery, training materials, 1 times Tea/ Coffee, one-time lunch and training certification.

Group Discount: 10% for 4 and more participants

Cancellation

The cancellation of participation should be informed by October 01, 2018 – 5 pm. If any participant does not appear without any prior cancellation notice, full charge shall be levied on the client.

Certificate

Certificate of participation will be awarded only for those who fully attend the course.

Registration

9801014401 / 9801014406

glatraining@growthacademy.com.np development@growthacademy.com.np