Cybersecurity Primer

Organisations face cyber threats of established and increasing sophistication which can have a significant impact on their business operations, customer relations and revenue. In this context, various laws may require organisation to take measures to protect their computer systems and the information stored in such systems; this applies for internal systems as well as external systems, for in-house built or for externally developed ones. To get a good grasp of these threats, common vulnerabilities, as well as typical mistakes made by development teams (inhouse and external), which are exploited in a typical cyberattack, this course provides a comprehensive overview of typical cybersecurity issues, key local and international cybersecurity and data protection guidelines and best practices, as well as international standards, frameworks, and approaches to cybersecurity. These topics are critical for managing supply chains, vendors, and external service providers, as they need to be addressed in contractual clauses and monitored as part of the oversight requirement. Failing to adequately manage vendors and service providers is among the most frequent findings for data breach decisions by regulators. This course is geared towards managers and compliance officers, who are responsible for data protection and procuring, controlling, and monitoring IT systems and development, but is also relevant to engineers with no or little security training.

This course complements our Cybercrime and Cybersecurity Law, Regulation, and Compliance course on the legal and compliance requirements relating to cybersecurity, and our Quantum Computing Concepts for Cybersecurity course.

Who should attend?

• Privacy Engineers, Data Analysts, and Data Architects
• Data Protection Officers (DPOs), Compliance Professionals, Corporate / In-house Counsels, Project Managers, Technical Staff, and Developers
• Executives, Managers, and Staff involved in the management, collection, use or other processing of personal data

Course Details

Course Outline

• Common Cybersecurity Issues
  • Security incidents versus data breach incidents
  • Implementation causes / failures
  • Cloud based and off-the shelf services
  • Human factors and Testing
• Local Guidelines on Cybersecurity Best Practices
  • Overview on PDPC’s technical guides
  • Overview on technical aspects of other regulators in Singapore
• International Standards and Frameworks relating to Cybersecurity
  • International Organization for Standardization / International Electrotechnical Commission (ISO / IEC) 27000 family of standards
  • Open Worldwide Application Security Project (OWASP), Common Criteria (CC), National Institute of Standards and Technology (NIST) Frameworks

Course Facilitator

Albert Pichlmaier   Senior Cybersecurity and Privacy Engineer Senior Learning Technology Designer, Drew Data Protection & Cybersecurity Academy