CERTIFIED
CYBER RISK OFFICER

ONLINE COURSE

Write your awesome label here.

About This Course

8 Weeks
Plus 1 Week Initial Orientation
8-10 Hours Per Week
Self Paced Entirely Online
Online Academy
Delivered Entirely Online
80 CPD Points
Approved by Various Bodies
Certification
Continual Assessments
Next Course 
Jan 9th, 2025
€2,249

CCRO Course - 1 Min

Write your awesome label here.
The Cyber Risk Officer course equips students with a comprehensive understanding of cyber risk management. The syllabus assumes a non-technical student and covers a range of topics from identification of cyber risks through to risk management options. The course has been designed to equip students with the knowledge, skills and confidence they require in order to protect the digital assets of their organisation and support the efforts of or lead the implementation of a cyber risk framework. 

Our Partners 

More Info

What Does The Course Cover?

“Learn how to understand, manage and communicate cyber risk strategically within an organization”

This course presumes no technical knowledge and brings students on a journey from understanding the cyber threat landscape to how to develop an appropriate cyber strategy for their organization.

Referencing real life case studies and supported with pragmatic examples of how to manage cyber risk within an organization the course path includes key learning objectives, that students can instantly apply and benefit from in their existing roles.

All students receive one to one feedback and support directly from the tutor on a weekly basis along with live group training sessions supported by continual assessments via online exams.

Written assignments are focused around practical scenarios and involve applying knowledge and communicating key messages with a senior business audience.

“If you are on a board or report to senior leaders in relation to cyber risk, this course is ideal for you”

Explore The Modules

MODULE 1

UNDERSTANDING CYBER RISKS AND A LITTLE TECHNOLOGY
Write your awesome label here.
We explore the cyber threat landscape and gain an understanding of the key threat actors, their motivations and techniques. We review a number of high profile cyber attacks with a view to understanding why they were attacked and what could have been done to prevent the breach.  We outline a key “Case Study” example that is referenced through the rest of the course.

MODULE 2

CYBER STRATEGY – THE BUSINESS CASE
Write your awesome label here.
We outline the importance and the anatomy of a cyber strategy. How a cyber risk framework operates and how it integrates with the organization. Understand the differences between standards, policies, procedures, legal and regulatory controls.  We outline how to identify the business value chain of an organization and the importance of business systems, assets and entities that support that channel. 

MODULE 3

CRQ – CYBER RISK QUANTIFICATION AND METRICS
Write your awesome label here.
We explore the traditional cyber metrics organizations leverage in relation to cyber security and risk and discuss “Meaningful Metrics” that empower the business. Calculating inherent cyber risk, residual cyber risk and aligning those metrics with business objectives. Informing and supporting the business with KPI’s (Key Performance Indicators) and KRI’s (Key Risk Indicators). Leveraging those metrics to develop appropriate maturity roadmaps and report and alert the business. 

MODULE 4

CYBER LEADERSHIP AND CULTURE
Write your awesome label here.
The role of leadership, the governance structure and supporting processes are outlined. The challenge of resourcing, attracting new and developing in-house talent.  Establishing a culture of loyalty and business protection.  Identifying gaps in leadership and supporting  a meritocracy based on talent and ability.  Converging the physical security efforts with cyber to deliver a holistic program of protection for your organization.

MODULE 5

CYBER RISK AND THE LAW
Write your awesome label here.
Understanding the complex myriad of cyber related laws, regulations and business requirements is a challenge. In this module, we outline International landscape of key laws and regulations including GDPR and the NIS Directive. Developing an approach to understanding how to identify what is relevant and may impact your current or future business model. We outline key approaches to identifying the nexus of control requirements and driving efficiency by aligning business, legal and regulatory drivers with business drivers.

MODULE 6

CYBER RESILIENCE AND INCIDENT MANAGEMENT
Write your awesome label here.
We outline the minimum expectations of regulators when it comes to establishing cyber resilience.  Understanding preventative, detective and responsive controls. Best practices in aligning business continuity, disaster recovery and incident response with a program of cyber resilience. We outline the appropriate response to a breach. We focus on key aspects such as detection, communication and containment. We leverage the case study to outline the key aspects and learning points such as proactive strategies to detect an incident and containment strategies to mitigate the impact. 

MODULE 7

THIRD PARTY CYBER RISK – VENDORS AND REMOTE WORKERS
Write your awesome label here.
Every business is comprised of a business value chain. That is the various “links” or parts of the business that support the delivery of a particular service or channel. These links are often provided by third party partners, vendors or remote workers. We explore, how to identify, analyze, manage and report the associated risk to the business. The impact of the paradigm shift in the legal landscape including GDPR and how that factors into your approach. 

MODULE 8

PUTTING IT TOGETHER – DEVELOP A CYBER RISK STRATEGY
Write your awesome label here.
In this module, we outline how to put everything you have learned together. Students leverage the case study or their own organizations to develop a complete cyber risk strategy. Dissecting the Cyber DNA of the business, establishing key metrics and a maturity roadmap. Aligning with the business strategy and establishing a board level reporting process. Developing processes to measure and manage the implementation of the cyber risk strategy and report the RoI to the business. 

The Course is For?

The course syllabus has been specifically designed to be collaborative and bring together business leaders of various disciplines within an organization. They are the key stakeholders in designing, implementing or supporting the cyber risk management program of an organisation. Key cyber risk management stakeholders include:

  • C-Suite
  • CISO/CSO/CIO or CRO
  • Head of IT/Security
  • CCO Chief Compliance Officer
  • Cyber Security/Risk/Compliance Teams
  • Legal
  • Procurement
  • Head of Business Units
  • Technology Leaders / Project Managers
  • Management Professionals / Team Leaders
  • Digital Consultants
IDEAL TRAINING COURSE FOR
Cyber Risk Leader
Develop and Implement Strategy
Gaining Recognition
Cyber Risk Management Specialist
Cyber Security and Risk Teams
Collaborate and Support Enterprise

How Do You Learn?

The course is delivered over 8 weeks and preceded with an orientation module. Every Thursday a new module is added to the course. During the orientation module you will be introduced to your online teaching and technical support network and gain an understanding of the interface and tools. During the orientation phase you complete your student profile and gain an understanding of key milestones and how your assessments are calculated.  Training material comprises of rich interactive media such as videos, infographics, activities and course notes. There are many opportunities for collaborative learning via the discussion forums and you can leverage the portal to connect to other students around the world. During the course you can reference the case study example outlined in Module 1 or reference your own organization. During the course students will develop a cyber strategy as part of their assessment, this can be based on their own organization, the case study or a fictitious entity

What Support Do I Get?

Head Tutor
Subject Expert
Course Manager
One to One Student Support
Technical Support
Available to Solve Tech Issues
Social Learning
Student Network Collaboration
Extended Network of Material
Recommended External Material
Subtitles/CC
Core Module Videos Have Captions

Head Tutor

Paul C Dwyer – President of the ICTTF International Cyber Threat Task Force
Paul C Dwyer is recognised as one of the world’s foremost experts on cyber security, risk and privacy. As CEO of Cyber Risk International he specialises in corporate and enterprise security, development of cyber defence programs, and business operations protection for CRI clients. As founder and President of the ICTTF International Cyber Threat Task Force he is an advocate for diversity in the industry and leads a community of over 30,000 with a common goal to defeat cyber evil.
Certified an industry professional by the International Information Security Certification Consortium (ISC2) and the Information System Audit and Control Association (ISACA). Approved by the National Crime Faculty and the HTCN High Tech Crime Network. He has worked extensively around the world his diverse career spans more than 30 years working with military, law enforcement and the commercial sector.
Roles have included:
  • President of the ICTTF International Cyber Threat Task Force
  • Co Chairman of the UK NCA National Crime Agency Industry Group
  • Advisor to NaCTSO (National Counter Terrorism Security Office)
  • Advisor to NATO on Countering Hybrid Cyber Threats
  • Advisor to UK Defence Committee DEFCOM in Parliament
  • Deputy Chair – Organised Crime Task Force Industry Group – NI
  • Interim Global CISO for numerous multi national organisations
  • Advisor to numerous governments and intelligence agencies
PAUL C DWYER CEO - BIO
“An eye opening course bringing to life exactly what a CISO is and maybe more importantly what is isn’t. Many lightbulb moments that will help refocus how to better align security with the business, and what it takes to be successful.” Mark Conabeare – CISO Debenhams
“An eye opener giving a global picture backed up with real world examples, Great Knowledge.” Shane O’Reilly – Head of IT – Total Produce

What Our Students Say

Write your awesome label here.

Jennifer O’Brien

Lead in Group Internal Audit, Bank of Ireland
Write your awesome label here.

Dr Vince Hughes

Director, Crime Stoppers International
Write your awesome label here.

Stephen McCormack 

Head of IT, Maxol
Write your awesome label here.

Audrey Barrett

Data Protection Officer, SIPTU
 I would highly recommend the Certified Cyber Risk Officer course. It provides a good overview of the issues and risks associated with cyber security, without assuming a detailed technical knowledge. I have found the course to be very engaging, structured and well taught. 
Richard Atterbury
Head of Compliance Cyber Security  -
Barclays Bank PLC
 I'm finding the course fascinating and really well paced, I was a bit concerned about fitting in the course around my role but with the lectures being online and recorded if you can't make the slot its ideal. Would recommend to anyone interested in a Cyber Risk role. 
Simon Rafferty
Financial Crime Analyst -
MotoNovo Finance
 I cannot recommend the CCRO course enough. The team were incredibly supportive and the course itself was presented in a easy to follow, non technical manner. I am looking forward to putting some of the learning into practice.. 
Tracey Gernon
Senior Risk Manager -
EML

 I'm finding the course fascinating and really well paced, I was a bit concerned about fitting in the course around my role but with the lectures being online and recorded if you can't make the slot its ideal. Would recommend to anyone interested in a Cyber Risk role. 
Michel Schumacher
Senior Financial Crimes Compliance Manager - HSBC

CCRO - Certified Cyber Risk Officer's Work Here

Write your awesome label here.

FAQ

How Do I Get Certified?

Step One: Apply for Enrollment and Pay the Course Fees.
The application process commences as soon as you enroll and pay for the course online. The CCRO online course includes continual evaluation of your performance and competency via online exams, written assignments and ILT sessions. The CCRS course is based on only module related online exams.
If you meet all the certification requirements which includes the adoption of the ICTTF Code of Ethics and successful performance on the required curriculum and competency evaluation, you will be certified and entitled to all of the rights and privileges associated with the designation. You need to re-certify every three years.
Certification is by the board of the ICTTF International Cyber Threat Task Force and accredited by the ICA International Compliance Association.

What is a Cyber Risk Officer?

A Cyber Risk Officer is an individual with the knowledge, skills and experience to develop, implement or support a cyber security, risk and/or privacy program at an organization. It is often a secondary role to a primary role such as CISO or CCO. Aspiring CISO’s and other business leaders often become certified cyber risk officers in order to augment and/or validate their background for new challenges and roles, including board levels positions such as NxD’s.

How Does The Course Equip Students?

A comprehensive understanding of cyber risk management.

Will It Help My Career?

There is a Global IT security skills shortages and it has now surpassed four million according to a recent industry survey. The number of unfilled positions now stands at 4.07 million professionals, up from 2.93 million this time last year. This includes 561,000 in North America and a staggering 2.6 million shortfall in APAC. The shortage of skilled workers in the industry in Europe has soared by more than 100% over the same period, from 142,000 to 291,000.
The global security workforce needs to increase by a staggering 145% to cope with a surge in hiring demand. In Europe, this has come particularly in smaller companies with one-99 employees, as well as those with over 500 employees.In the report, over half (51%) of cybersecurity professionals said their organization is at moderate or extreme risk due to staff shortages.

Do I need to have a Cyber Security Background?

No. The syllabus has been developed for a non-technical audience. When technical concepts are referenced in any way, they are fully explained.
It is assumed that you have very limited IT technical knowledge. This course is for business leaders and provides them with the knowledge, skill and confidence to liaise with technical subject matter experts by demystifying the jargon and concepts.

How Do I Re-certify?

A CCRO Certification lasts for three years from the date awarded. From June 2023 a recertification exam will be available online at www.icttf.org. There will be a fee of €500 for the recertification exam or any resits required.
If students elect to re-certify by re-enrolling in the course, they have that option and will receive €500 discount off the cost of the CCRO course.

What is the Course Format?

The ICTTF – CCRO (Certified Cyber Risk Officer) course is delivered entirely online with a combination of live ILT (Instructor Led Training) sessions with the Head Tutor, recorded videos, downloadable case books and interactive material.

Course Overview

This is an eight week course prefaced by an “Orientation Module”.

Orientation Module

Overview: Introduction outlining the features of the online campus portal. Students get an opportunity to complete their online student profiles. Introductions to key support contacts.
Format: Video, PDF
Following the orientation module, each module becomes available on the Thursday morning of each week at 08:00 (Local Time – Dublin, Ireland).
Each module is comprised of the following materials:
  • Reading Material (Case books and References in PDF Format)
  • Video (Covering the Module Topic)
  • 1 Hour Live ILT session with Head Tutor (Live every second week at 13:00 and available recorded
  • Case Study: Video
  • Online Assessment/Exam
  • *Assignment (Written assignments are due by following Wed 12:00)
*There is a written assignment as part of the first 7 modules.
The structure of all educational modules (1-8) are very similar.
For the CCRO course, it is advised  for the student to make an estimated commitment of 8-10 hours per week for each module. These assignments contribute towards the continuous evaluation of students and form part of their overall assessment and scoring.

What is the Pass Mark and How Does the Scoring Work?

The pass mark for successful certification on the CCRO course is 80%
Students are continually evaluated during the course.
Each Week There is an Online Module Assessment/ Exam – 8 in Total
For the First 7 Modules – There are also Written Assignments that have to be Submitted Each Week – 7 in Total
Scores are averaged across all 15 (exams + assignments) evaluated areas. The total average score across all assignments and exams is used to determine if a student is successfully certified.

What is the Cancellation Policy?

Registration: A booking online reserves your place, this does not guarantee your place. Only *payment in full of the course fees will guarantee your place. You will be sent a registration email to complete your profile once payment in full has been received.
Installment Payment Option: If a student has elected to pay by installments, they are fully committed and legally obligated to pay ALL installments outlined.
Course Cancellation: Due to unforeseen circumstances, ICTTF Ltd may be compelled to cancel the course at short notice. In such circumstances, registrants will be entitled to a full refund of their course fee, or the course fee can be credited towards a future course.
Cancellation:

Notice of a registrant’s intention to cancel their registration must be made in writing (sales@ICTTF.org ) to ICTTF Ltd. In such cases, registrants will have the following options:

1) Nominate a replacement to attend in their place. Such notice must be made in writing at least 5 days before the commencement of the course.

2) Defer to a course commencing at a later date. Such notice must be made within 10 days of the commencement of the course and is subject to availability.

Registrants who fail to attend the course will be charged 100% of the full fee.

Substitutions/Replacements:

Where a registrant who has to cancel nominates a suitable replacement to attend in their place, no cancellation penalty will be incurred unless the registrant has already started the course. The suitable replacement must meet the Entry Requirements for the

course.

Fees: Participants wishing to transfer to a later date will be billed a 10% administration fee plus any increase in the price of the course.  

Participants who started the course and wants to nominate a replacement will be billed a 10% administration fee plus any increase in the price of the course.
Changes to Course: ICTTF Ltd. reserves the right to change course content, structure, lecturers and dates.

Where Are the Terms and Conditions?

Please follow this link to the Cyber Risk Academy terms and conditions: Terms and Conditions

Where Will my Certified Qualification be Recognized?

Our cyber risk certifications are recognized globally. This course has been accredited and benefits from dual certification by the International Compliance Association (ICA); CPD UK and other respected bodies.