Cyber Security Leadership and Strategy in the AI Era – Executive Programme

An advanced executive programme for CISOs, heads of security and senior risk leaders. Master personal accountability and liability, quantitative cyber risk and capital allocation, UK and international regulation (UK GDPR, the Cyber Security and Resilience Bill, NIS2, DORA, the Cyber Resilience Act, SEC rules), operational resilience, threat-informed defence, AI and post-quantum strategy, operating model design and crisis command. Finish by leading a multi-day, multi-jurisdiction ransomware, deepfake and AI-agent breach at a fictional listed company, producing board-grade deliverables including a market disclosure recommendation, a ransom decision paper, a quantified risk report and a three-year transformation plan.

Who this course is for: CISOs, deputy CISOs, heads of security, IT and risk directors, senior consultants and virtual CISOs, and executives or non-executive directors accountable for cyber risk. Assumes several years of security, technology or risk experience. Not an introductory course.

Self-paced online learning. Earn a Certificate of Completion on passing.

What you will learn

  • Define and defend a CISO mandate, operating model and decision rights, and manage personal and director-level accountability under UK and international regimes
  • Brief and challenge boards using the Cyber Governance Code of Practice, quantified scenarios and risk appetite architecture
  • Quantify cyber risk with FAIR-style models, calibrated estimates, Monte Carlo simulation and loss exceedance curves, and use them to allocate capital and structure insurance
  • Navigate UK GDPR, NIS and the Cyber Security and Resilience Bill, ransomware policy, FCA and PRA operational resilience, NIS2, DORA, the EU Cyber Resilience Act, the EU AI Act and SEC disclosure rules
  • Design threat-informed defence, zero trust, resilience engineering, third-party and M&A cyber programmes, and AI and post-quantum strategies
  • Design security operating models, sourcing strategies, talent architecture and human risk programmes
  • Command a major crisis, including sanctions-aware ransom decisions, legal privilege, market disclosure and stakeholder management
  • Produce board-grade crisis, risk, disclosure and transformation deliverables in a realistic simulated breach

Course modules

  • The modern CISO mandate
  • The strategic threat landscape
  • Quantified risk and capital allocation
  • Integrated governance and the regulatory landscape
  • Strategy, architecture and resilience leadership
  • Third parties, transactions and emerging technology
  • Building the security organisation
  • Crisis command
  • Capstone simulation – Operation Silent Ledger
  • Executive leadership and your next role