Qualified Cybersecurity Professional in Finance

CONTENT

Curriculum: The body of knowledge is aligned with the Executive Master in Cybersecurity management lectured at Solvay Lifelong Learning (solvay.edu/cybersecurity). It is based on material compiled by Professor Georges Ataya, as well as on general publications related to cybersecurity. This training is also recognised by The House of Training (Chamber of Commerce and the Luxembourg Bankers’ Association (ABBL)).  The education is structured into four modules.  

Module 1 : Introduction to Cybersecurity Fundamentals (duration 1 day 6h classroom)

Lecturers : Prof. Georges Ataya, Solvay Lifelong Learning

Guest speakers : Samuel Goret (Tiber-BE programme Manager) & Jean-Louis Buchholz (Tiber-BE Test Manager) - National Bank of Belgium (NBB) .

Objective: This module aims to equip participants with a comprehensive understanding of cybersecurity principles, covering fundamentals, governance, risk, and compliance. It focuses on confidentiality, integrity, and authentication processes, emphasizing the protection of sensitive information and adherence to predefined policies. The curriculum includes in-depth risk management practices, guiding participants in identifying and mitigating cybersecurity risks effectively. Additionally, it addresses compliance and legislation, stressing the importance of adhering to industry standards. By the module's conclusion, participants will have a solid foundation to explore and specialize in cybersecurity confidently.

Module 2 : Cybersecurity Battleground: Threats, Vulnerabilities and Technologies (duration 1 day 6h classroom)

Lecturers : Steve Purser, Solvay Lifelong Learning

Guest speakers : Karel De Kneef  -  CyberXP Coach - Cyber Security Challenge Belgium

Objective: In this module we will comprehensively address cybersecurity management by integrating key capacities such as Identification, Protection, Detection, Response, and Recovery techniques. The curriculum presents current threats, vulnerabilities, security controls, and technologies, offering insights into the threat landscape. It emphasizes the connection between cybersecurity and information security practices, aligning frameworks with business needs and risks. The course delves into existing frameworks, risk analysis, management buy-in, solution search, alignment with risk appetite, implementation, and follow-up. Decision-making tools for adverse conditions and seemingly hostile environments are provided to participants. Additionally, a specific financial sector workshop is included, focusing on the identification of threats and vulnerabilities related to business functions, risk practices, and the determination of a robust mitigation model.

Module 3 : Incident Response, Security Controls and Security Operations  (duration 1 day 6h classroom)

Lecturers : Steve Purser, Solvay Lifelong Learning  

Guest speakers : Remy Knecht, Head of Anti-Fraud services Isabel Group

Objective: This module covers context analysis, scope definition, threat modeling, security controls, and solution space identification. Emphasizing a holistic approach, it explores trade-offs from technological, human, and procedural perspectives. The significance of kill-chain analysis in threat modeling is highlighted for focus, cohesion, and business case development. Operational planning tools and frameworks introduce defense theory, mental models for understanding adversaries, telemetry, attack detection, incident response, crisis communication, and continuous improvement assessment tools. In summary, the module provides a comprehensive guide to navigating security controls and incident response in operations.

Module 4 : Cybersecurity -Governance Management -Leadership (duration 1 day 6h classroom)

Lecturers : Prof. Georges Ataya, Solvay Lifelong Learning

Guest speakers : Alexandre Pluvinage, Head of Fraud and Online Security Awareness ING

Objective: During this course we will provide you with a thorough understanding of cybersecurity management, focusing on roles and responsibilities in crafting and executing a robust strategy. It emphasizes aligning strategic components with organizational goals and adapting to evolving threats, covering vital areas like supply chain considerations, the three lines of defense, and the seven components of maturity. The module explores effective governance practices, including frameworks and policies, fostering a well-structured and accountable governance framework. Communication is highlighted as crucial for successful cybersecurity governance, empowering participants to convey policies, incidents, and strategies to diverse stakeholders, promoting cybersecurity awareness. Ultimately, participants gain the knowledge and skills needed to develop a comprehensive cybersecurity strategy, implement effective governance, and enhance communication within their organizations.

PRACTICAL INFORMATION

• Duration: 4 days of training (6 class hours per day)
• Hours: 09:00 to 17:00
• Location: Febelfin Academy: Phoenix building, Koning Albert II-laan/Boulevard du Roi Albert II 19, 1210 Brussels
• Language: This training will be given in English.
• Preparation: We kindly ask you to study the pre-course material (available on your profile MYFA) before the start of the trajectory – some of them are a must read, others are optional to read. They have been carefully selected to introduce the class workshops and to support in-depth discussions with fellow participants.
• Qualification and examination information: The program leads to the certification "Qualified Cybersecurity Professional in Finance" upon successful completion of the full programme and the related assessments.

  The assessment consists of:

  • One global multiple-choice test covering the content of all modules (without negative marking / no disc correction).
  • One group assignment, completed and assessed in class during the scheduled sessions.

  The multiple-choice test is completed online on your profile MyFA and remotely from your workplace or home. Participants must complete this test within one month after attending the training programme. You have two attempts to pass the test.  To obtain the certification, participants must achieve a minimum score of 60% on the multiple-choice test and successfully complete the group assignment. The group assignment cannot be retaken.  Participants who meet these requirements will receive the certificate demonstrating that they have successfully completed the programme and acquired the required technical knowledge and skills.