Chief Information Security Officer

Curriculum

1. 1

   The CISO's mission, positioning and responsibilities in a financial institution

   Lecture

   3h
2. 2

   ISO 27001 ISMS: the CISO's role in the PDCA cycle

   Hands-on workshop

   4h
3. 3

   Security policy, charter, procedures: drafting and governance

   Writing workshop

   4h
4. 4

   Information security risk management: tools and methods for the CISO

   Practical work

   4h
5. 5

   Incident management: CSIRT, implementation, internal/external coordination

   Simulation

   4h
6. 6

   CISO dashboard: KPI, KRI, reporting to the CEO and the regulator

   Excel/Power BI workshop

   4h
7. 7

   CISO communication: CEO, CIO, auditors, regulators

   Role play

   3h
8. 8

   Revision and mock exam

   Mock multiple-choice test

   2h

Skills acquired

• Define and carry out the CISO's mission in an African bank
• Run the ISO 27001 ISMS and maintain its PDCA cycle
• Produce an information security dashboard for executive management
• Coordinate information security incident response with internal and external stakeholders

Curriculum

1. 1

   Multi-year information security strategy: building it, budget trade-offs, presenting to the CEO

   Strategy workshop

   5h
2. 2

   Operational oversight: SOC, SIEM, CERT, CTI: the CISO's role and supervision

   Cyber Range lab

   6h
3. 3

   Threat intelligence: using MISP and TIP for proactive monitoring

   Cyber Range lab

   4h
4. 4

   Major information security crisis management: coordinating the crisis cell (ROOM#42)

   ROOM#42 exercise

   6h
5. 5

   Advanced compliance: DORA, ISO 27001, BCEAO Instruction 008

   Regulatory workshop

   4h
6. 6

   Securing transformation projects: DevSecOps, API security, cloud

   Technical workshop

   5h
7. 7

   Crisis communication and media management for the CISO

   Media training

   3h
8. 8

   Preparing the CISO file and defence coaching

   Individual coaching

   2h

Skills acquired

• Build and defend a multi-year information security strategy before executive management
• Supervise a SOC, a CERT and a CTI function in a banking context
• Lead a major information security crisis cell as coordinating CISO
• Ensure advanced DORA and BCEAO compliance in information security

Curriculum

1. 1

   The CISO as a strategic actor: influence, advocacy and sector cooperation

   Lecture + round table

   5h
2. 2

   Pan-African security architecture: ISAC, CTI sharing, sovereignty

   Expert seminar

   5h
3. 3

   Systemic crisis management: sector-wide attack, coordination with regulators

   Major ROOM#42 exercise

   6h
4. 4

   CISOs and the AI transformation: opportunities, risks, algorithmic governance

   Foresight seminar

   4h
5. 5

   Running information security maturity programmes: CMMI, ISM3 adapted to Africa

   Workshop

   5h
6. 6

   CISO personal development: leadership, resilience, stress management

   Coaching

   4h
7. 7

   CISO thesis defence before a panel

   Oral examination

   6h

Skills acquired

• Exercise CISO leadership across a pan-African financial group
• Lead a major sector-wide information security crisis exercise with regulators and peers
• Integrate AI into information security governance within a sound ethical and regulatory framework
• Represent the CISO community in African and international cooperation bodies

Curriculum

1. 1

   Advanced teaching for the CISO role: cases, coaching, simulation

   Seminar

   5h
2. 2

   Designing ROOM#42 crisis scenarios (CISO level)

   Workshop

   6h
3. 3

   Certifying and assessing AFP-RSSI candidates

   Demonstration

   10h

Skills acquired

• Train and certify CISOs across the entire AFP-RSSI track
• Design immersive crisis scenarios for CISO training
• Monitor standards and keep the AFP-RSSI framework up to date