Risk Analyst

Curriculum

1. 1

   Introduction to cyber risk management in finance

   Lecture

   3h
2. 2

   Threat landscape in WAEMU/CEMAC (fraud, ransomware, APT)

   Lecture + case study

   3h
3. 3

   Regulatory framework: BCEAO, BEAC, DORA, ISO 27005

   Lecture

   3h
4. 4

   Risk assessment methods (EBIOS RM, OCTAVE)

   Guided workshop

   4h
5. 5

   Key risk indicators (KRI) and reporting

   Practical work

   3h
6. 6

   Introduction to business continuity (BIA, RTO, RPO)

   Case study

   3h
7. 7

   Revision and exam preparation

   Mock multiple-choice test

   2h

Skills acquired

• Identify the types of cyber risk in the African financial sector
• Apply a simplified risk analysis method
• Read and interpret a basic risk register
• Understand BCEAO/BEAC regulatory obligations on risk

Curriculum

1. 1

   EBIOS Risk Manager: full deployment in a banking context

   Cyber Range workshop

   6h
2. 2

   Analysis of advanced threat scenarios (threat modelling)

   ROOM#42 simulation

   4h
3. 3

   Third-party and supply chain risk management

   Practical case

   4h
4. 4

   DORA compliance: ICT Risk Management Framework

   Lecture + exercises

   4h
5. 5

   Designing and monitoring a risk treatment plan

   Supervised project

   5h
6. 6

   Risk dashboards and reporting to the executive committee and regulators

   Excel/Power BI workshop

   4h
7. 7

   Cyber crisis exercise: the risk analyst's role

   ROOM#42 simulation

   5h
8. 8

   Exam preparation and case defence

   Coaching

   3h

Skills acquired

• Lead a complete EBIOS RM analysis in a financial institution
• Produce a risk report that meets the expectations of a WAEMU regulator
• Run a cyber crisis exercise as risk analyst
• Integrate third-party risk management into the security policy

Curriculum

1. 1

   Architecture of a GRC (Governance, Risk, Compliance) framework for a banking group

   Lecture + real case

   6h
2. 2

   Financial quantification of cyber risk (FAIR, cyber VaR)

   Quantitative workshop

   5h
3. 3

   Integrating ISO 27001/27005 into the African prudential framework

   Advanced course

   5h
4. 4

   Operational cyber resilience: DORA and TIBER-EU adapted to WAEMU

   Comparative analysis

   5h
5. 5

   Running a SOC/SIEM through a risk lens (MISP, TIP)

   ACRC Cyber Range lab

   5h
6. 6

   Designing a risk programme at pan-African scale

   Strategic project

   5h
7. 7

   Seminar: threat intelligence and strategic foresight

   Guest expert

   4h

Skills acquired

• Design and lead a GRC programme across an African financial group
• Quantify cyber risk in financial terms for the executive committee and oversight bodies
• Integrate CTI tools (MISP, TIP) into proactive risk management
• Represent the institution before regulators on cyber risk matters

Curriculum

1. 1

   Instructional design applied to financial cybersecurity

   Seminar

   4h
2. 2

   Designing practical cases and ROOM#42 simulations

   Hands-on workshop

   4h
3. 3

   Learner assessment and certification techniques

   Course

   3h
4. 4

   Continuous update of the AFP-RA framework (standards watch)

   Collaborative watch

   4h
5. 5

   Delivering an AFP-RA Foundation session in real conditions

   Assessed demonstration

   6h

Skills acquired

• Deliver all AFP-RA modules (Foundation to Expert) on behalf of ACRC
• Design immersive practical cases on the Cyber Range and in ROOM#42
• Assess and certify candidates against AFP standards
• Contribute to the development of the AFP-RA framework