Block
Cyber Education for executives and board members
NIS2 Directive

Board Education on Cybersecurity

As required by NIS2 Directive and country laws.

Board Education on Cybersecurity as required by NIS2 Directive and country laws.

Bring leadership to executives on cybersecurity decision making. Catch-up with essentials and embark with those who have the know-how.

Short education series for Board and executives with four sessions of two hours.

Participants receive an attendance certificate.

Join open sessions or request your own in-company session.

Open Session In Company Session
Slide

Certification of accomplishment is available through Solvay Lifelong Learning.

Our Partners

Lead speakers
Pr. Georges Ataya
Professor Georges Ataya

Steve Purser

Steve Purser

Marc Vael

Marc Vael

Marc Vael

Professor Georges Ataya

Steve Purser

Marc Vael

Block
Session 1 – CYBERSECURITY CONCERNS
- The evolution of Cybersecurity through the decades
- Enterprises response from inefficient to expensive
- Location of the decision making
- Threats illustrated
- Sources and causes of threats
- Business risks and impact
- Supply Chain vulnerability
Session 2 - THE RISK FACTOR

- Technology risks and impact on Business
- Holes in the cheese
- Enterprise architecture as a strategy
- Relevant Enterprise Response
- Implementing protections and awareness
- Roadmap for a protection
- Frameworks and lessons learnt
- Risks, mitigation projects
- What comes on first?
- Budget considerations and ROI
Session 3 - CYBERSECURITY GOVERNANCE
- Roles across the enterprise
- The CISO function
- The line managers’ action
- Three lines of defence
- Governance Structures: Organisation and accountability
- “C” as in Compliance; “R” as in Risk ; “G” as in Governance
- The seven components of maturity
- Important terms: NIS2, DORA, GDPR, CRA, etc.
- The Certification dilemma
Session 4 – THE LEADERS ACTION
- The leader formal responsibility (NIS2)
- Leader’s sources of knowledge
- Towards a Protection Transformation
- The four-dimension Dashboard
- A Dashboard or a Third line?
- Putting it all together
- Towards a total governance
- Cybersecurity Agenda on Board and executives meeting

NIS 2 - Article 20 – Governance


1. Member States shall ensure that the management bodies of essential and important entities approve the cybersecurity risk-management measures taken by those entities to comply with Article 21, oversee its implementation and can be held liable for infringements by the entities of that Article. The application of this paragraph shall be without prejudice to national law as regards the liability rules applicable to public institutions, as well as the liability of public servants and elected or appointed officials.



2. Member States shall ensure that the members of the management bodies of essential and important entities are required to follow training, and shall encourage essential and important entities to offer similar training to their employees on a regular basis, in order that they gain sufficient knowledge and skills to enable them to identify risks and assess cybersecurity risk-management practices and their impact on the services provided by the entity.



image
image

DORA - Article 5 – Governance and Organization

1. Financial entities shall have in place an internal governance and control framework that ensures an effective and prudent management of ICT risk, in accordance with Article 6 in order to achieve a high level of digital operational resilience.



2. The management body of the financial entity shall define, approve, oversee and be responsible for the implementation of all arrangements related to the ICT risk management framework referred to in Article 6.



3. Financial entities, other than microenterprises, shall establish a role in order to monitor the arrangements concluded with ICT third-party service providers on the use of ICT services, or shall designate a member of senior management as responsible for overseeing the related risk exposure and relevant documentation.



4. Members of the management body of the financial entity shall actively keep up to date with sufficient knowledge and skills to understand and assess ICT risk and its impact on the operations of the financial entity, including by following specific training on a regular basis, commensurate to the ICT risk being managed.



Slide

Professor Georges Ataya founded and serves as the academic director of the Executive Master's in Cybersecurity Management at Solvay Lifelong Learning (ULB). The six modules provide the essential knowledge for senior cybersecurity professionals.

Slide

EU funded projects

Professor Georges Ataya, Solvay Lifelong learning (ULB), and Ataya & partners SRL are involved in the following European funded projects for spreading cybersecurity education, awareness and knowledge.

Involved in the CyberHubs project launched by Digital EUROPE, co-funded by the Erasmus+ Programme of the European Union and leaded by Agoria at the Belgian level.  It aims to improve the quality and relevance of education and training programmes in cybersecurity and to provide an innovative methodology for anticipating skills needs.

Digital4Security, a €20 million EU-funded project launched in October 2023, equips European SMEs with cybersecurity expertise through collaboration among 35 partners from 14 EU countries. The program focuses on protecting economic prosperity by offering academic accreditation and industry certification to professionals, managers, and business leaders, aligning with ENISA's European Cybersecurity Skills Framework (ECSF) to enhance the security and success of European businesses.

COcyber is a 2-year project that aims to enhance the exchange, coordination, and collaboration between the cybersecurity civilian and defence spheres. COcyber will maximise the project impact by developing toolkits, ready-to-use material, and flagship events and engaging a group of ambassadors and renowned experts on its advisory board.

hidden