NCSP Practitioner Certificate

Course Outline

​

Following on from the learning secured during the NCSP® Foundation Certificate course, the NCSP® Practitioner Certificate course outlines current cybersecurity challenges and explains how organisations who operationalize a NIST-CSF program across an enterprise and its supply chain can mitigate these challenges, using the NIST 800-53 standard as an informative reference.

 

Course Features

​

• Certificate of Attendance

• NCSP® Practitioner Certificate Digital Badge on successful completion of exam

​

​

Course Organization

​

This NCSP® Practitioner Certificate course builds on knowledge secured during NCSP® Foundation Certificate study and covers the following topics:

• Course Introduction

 

• The Threat Landscape

  • Digital business threats

  • Thinking like a threat actor

​​

• The Cyber Resilient Organization

  • Organizational strategy and associated cybersecurity risk

  • Using the NIST-CSF to manage strategy-risk

  • Identify, Protect, Detect, Respond and Recover

​​

• "Understanding" Organizational Capability

  • Governance and assurance

  • Planning

  • Design (people, process, technology, culture)

  • Change management

  • Operate and execute

  • Innovation

​​

• "Enabling" Organizational Capability​

  • Adopt and adapt

  • Protection of business value

  • A FastTrack™ approach to continual improvement

​​

• "Improving" Organizational Capability using NIST 800-53

  • Gap analysis

  • NIST 800-53 control groups

  • Alignment of NIST 800-53 control groups to organizational capabilities:

    • Governance and assurance

    • Planning

    • Design (people, process, technology, culture)

    • Change management

    • Operate and execute

    • Innovation

​​

• "Assuring" Organizational Capability using NIST 800-53

  • 800-53 control implementation

  • 800-53 control audit

  • Assurance

  • Cybersecurity risk management capability

  • The link to organizational strategy-risk

​

• A Scalable Solution

  • Business Context

  • From 'Simple' to 'More Complex'

  • Scalable, "appropriate" Cybersecurity Risk Management 

​

• Course Closure

​​

​

Learning Objectives

 

This course will empower candidates with the following learning outcomes:

​

• Understand and describe how an organization can approach the adoption and adaptation of the NIST-CSF

• Understand and describe how to implement cybersecurity controls using an incremental improvement approach, using the NIST 800-53 Standard as an informative reference

• Understand and describe how to create, protect, and deliver digital business value