NEVADA | PROFESSIONAL EXPERIENCE

Program Professional Framework

Cybersecurity Leadership for Non-Technical Executives

Program Overview

Cyber risk is now a board-level business risk, yet many executives lack a practical way to oversee it. Written for leaders without a technical background, this course explains the threat landscape in business terms, how to set cyber risk appetite, what good governance looks like under frameworks such as the NIST Cybersecurity Framework 2.0, and how national requirements such as the Essential Cybersecurity Controls of Saudi Arabia's National Cybersecurity Authority shape obligations. Participants practise asking the right questions of security teams, reading cyber metrics and leading during a ransomware crisis.

Learning Outcomes

✓Explain the main cyber threats facing their organisation, including ransomware, phishing and supply chain attacks, in terms of business impact.
✓Define a cyber risk appetite statement and align it with enterprise risk management.
✓Evaluate the organisation's security posture using a concise set of board-level cyber metrics.
✓Assess security investment proposals by linking them to risk reduction and regulatory obligations.
✓Lead executive decision-making during a simulated ransomware incident, including communication and recovery priorities.
✓Set governance expectations for third-party and vendor cyber risk.

Target Audience

Chief executives, general managers and board members
Finance, legal and operations directors
Risk, compliance and internal audit leaders
Senior managers responsible for digital transformation programmes

Detailed Program Modules

01The Cyber Threat Landscape for Leaders

Threat actors, motives and common attack paths
Ransomware, business email compromise and data breaches
Lessons from major regional and global incidents

02Governance and Accountability

Roles of the board, executives and the CISO
NIST Cybersecurity Framework 2.0 and its Govern function
National requirements such as the NCA Essential Cybersecurity Controls and UAE information assurance standards

03Cyber Risk Appetite and Investment

Expressing cyber risk in financial and operational terms
Prioritising security investment and evaluating business cases
The role and limits of cyber insurance

04Overseeing Security Posture

Board-level metrics and reporting dashboards
Questions to ask security teams and auditors
Third-party and supply chain cyber risk oversight

05Leading Through a Cyber Crisis

Incident escalation and executive decision rights
Ransomware tabletop exercise
Regulatory notification, media and stakeholder communication

06Building a Security-Aware Culture

Leadership behaviours that shape security culture
Awareness programmes and phishing simulations
Data protection obligations under GCC personal data laws

Training Methodology

Interactive expert-led sessions grounded in workplace examples

Case studies and practical exercises drawn from the region

Group workshops with peer review of decisions and deliverables

Formative feedback against clear performance criteria

Applied Project & Assessment

Applied Project

Participants prepare a one-page cyber risk oversight brief for their board or executive committee: top cyber risks in business terms, a draft risk appetite statement, five metrics to track and the decisions leadership would take in the first day of a ransomware incident.

Assessment

Short diagnostic at the start, practical tasks linked to each learning outcome, and evaluation of the applied project against published criteria.

University Certificate & International Accreditation

Professional Certificate accredited by Twintech International University College of Technology in Cybersecurity Leadership for Non-Technical Executives

International accreditation: American Association of Innovation (AAI)