Skip to content
ACRC, Africa Cybersecurity Resource Center

AFP-CISO101

CISO 101: Taking Up the CISO Role

AFP-CISO101 is the onboarding and support programme for CISOs taking up the role for the first time or moving to a new institution in the African financial sector. A format unique on the market: 5 days of intensive training covering the CISO's first 100 days, followed by 3 months of monthly individual coaching with an experienced CISO mentor from the ACRC community. The ACRC community plays a central role: volunteer mentors, shared lessons learned, access to a peer network. A single certification level, but a transformative experience.

Who it is for

  • New CISOs taking up their first role in an African bank, insurer or fintech
  • Security managers promoted to CISO without a structured transition path
  • Experienced CISOs changing sector or institution and wanting a quick grounding
  • CIOs or deputy CIOs taking on the CISO function on an interim basis

Certification levels

AFP-CISO101 Certification

Prerequisites
CISO appointment imminent or effective for less than 6 months
Total duration
5 days of training (35h) + 3 months of monthly coaching (3 x 1h individual + 1 monthly group session)
Exam format
100-day plan (structured deliverable) + presentation before a panel of ACRC mentors
Practical exam location
ACRC Dakar + remote follow-up
Validity
3 years (recertification required)

Curriculum

  1. Understanding your institution in 30 days: mapping stakeholders, risks and strategic stakes

    Structured workshop + onboarding audit template

    4h

  2. The first 10 weeks: priorities, quick wins and building legitimacy

    CISO lessons learned + group coaching

    4h

  3. Information security baseline: how to quickly audit what you inherit (ISMS, incidents, contracts, team)

    Hands-on workshop with audit grid

    4h

  4. Building your relationship with the CIO, the CEO and the board: positioning, first report, first board meeting

    Simulation + role play

    4h

  5. Managing the team and budget when taking up the role: what you inherit, what you negotiate, what you defend

    Budget + management workshop

    4h

  6. The BCEAO/BEAC regulatory framework for the new CISO: immediate obligations, reporting, deadlines

    Condensed course + Q&A with a regulatory expert

    4h

  7. Handling a first major incident early in the role: how not to fail your first crisis (ROOM#42)

    ROOM#42 simulation

    5h

  8. Building the 100-day plan: method, content, presentation

    Writing workshop + coaching

    4h

  9. Presenting the 100-day plan before a panel of ACRC mentors

    Final oral + mentor feedback

    2h

Skills acquired

  • Take up the CISO role methodically, securing the first 100 days
  • Complete an onboarding audit in under 4 weeks
  • Establish legitimacy and first trusted relationships with the CIO, the CEO and the board
  • Handle a first major incident with confidence in the first months
  • Benefit from a network of experienced African CISO mentors for post-training follow-up

Registration request

Leave your details: the ACRC team will confirm the dates and practical details of the next session.

AFP-CISO101 · CISO 101: Taking Up the CISO Role

Other tracks

Work With ACRC

We use cookies required for the site to work and, with your consent, audience-measurement cookies. Cookie policy