CISO and Crisis Communication
Develop communication strategies for managing cybersecurity incidents and protecting organisational reputation.
Mastering communication activities for leadership roles
This module aims to build the essential skill required in crisis situations and as regular communication of the CISO to stakeholders. Crisis communication is required for three specific focuses that are: incident resolution, compliance notification, improving reputation.
Module Information
Crisis communication is required for three specific focuses that are: Communicate to resolve the incident and the crisis; Communicate as a compliance notification required by law and regulators; and finally communicate to improve the reputation as a follow-up on an incident/crisis. Mastering communication activities is a must skill for cybersecurity leaders.
Key Details
This module is delivered in hybrid format, as a combination of online, in-person and self-learning activities. The module uses innovative hybrid learning methods that combine live (synchronous) and self-paced (asynchronous) activities, with particular focus on practical activities and real-world scenarios connected to cybersecurity. Expert tutors guide students through the material, ensuring a comprehensive learning experience.
This module aims to build the essential skill required in crisis situations and as regular communication of the CISO to stakeholders. Toward this goal the module employs in-class participation and assignments.
Time commitment:
- Online activities: 14 hours
- In-person activities: 14 hours
- Self-learning: 28 hours
- Individual, team and guided projects and activities: 69 hours
- Total: 125 hours
Credit points:
- 5 ECTS
Grading:
- In-class Activity: 10%
- Assignments: 40%
- Exam: 50%
Subjects covered
- The purpose of the communication activities
- Communication elements
- Building a dashboard as a baseline for communication to key stakeholders
- Principles of Incident/Crisis management
- Communicate to resolve the incident/Crisis
- Cybersecurity related regulations
- Conduct regulatory communication requirements
- Business needs for preserving reputation
- Validate cybersecurity and communication activities
- Awareness program objectives, audience and plans
- Cybersecurity awareness tools
- Putting it all together: case studies
Learning objectives
Recognize crisis communication for the three purposes of containing the incident/crisis, of regulatory notification, and of preserving reputation.
Recognize regular awareness activities as a n essential control for improving the preparedness of the Human Factor.
Master the various actions related to planning, developing and conducting communication actions.
Create the communication plan including the design, the timeline, the identification of target audience, the definition of the communication channel, the identification of the message, the evaluation of the impact, and the improvement for a future cycle.
Identify solutions and proposes resolution plans/projects
Module leaders
Catalin is Lecturer at POLITEHNICA Bucharest, the Computer Science and Engineering Department. He is primarily interested in distributed systems and security, with a penchant for teaching and mentoring.
Most of the courses that Catalin is involved in are touching on different security topics, discussing traditional security, mobile security, software architecture that should incorporate security paradigms, etc. He is involved in mentoring students in cybersecurity topics. Catalin’s research focus is on systems and software security, particularly security in open systems, cyber-reasoning systems.
Stay ahead in cybersecurity