Cyber Security Management and Awareness for Organisations Course
The Cyber Security Management and Awareness for Organisations Course is a 5-day professional training programme delivered in-person or online in ICT-Information & Communication Technology, ending with a TrustGate Corporate Skills certificate of completion.
Most breaches in African organisations start with a person, not a firewall: a clicked link, a reused password, an approved fraudulent invoice. This course is written for the managers who own that risk rather than for engineers who configure devices.
Last updated
Course Overview
Learning Objectives
- Assess your organisation's cyber risk exposure and prioritise it
- Apply a recognised framework such as ISO 27001 or the NIST Cybersecurity Framework at management level
- Write security policies staff can follow: access, passwords, devices, remote work
- Run a staff awareness programme, including phishing simulations
- Recognise and prevent social engineering, business email compromise and invoice fraud
- Manage third-party and supplier security risk
- Build and test an incident response and business continuity plan
- Meet the security obligations in data protection law
- Report cyber risk and readiness to executives and the board
Course Content
- How organisations are actually breached
- Ransomware, business email compromise and invoice fraud
- Insider threat, negligence and departing staff
- Mobile money and payment system fraud
- Threats specific to the public sector, NGOs and SACCOs
- Sources of credible threat information
- Who owns cyber risk in an organisation
- ISO 27001 and the NIST Cybersecurity Framework at management level
- Identifying critical assets and crown jewels
- Risk scoring, appetite and treatment decisions
- Building and maintaining a cyber risk register
- Budgeting security by risk rather than by vendor pitch
- Access control and the principle of least privilege
- Password policy and multi-factor authentication
- Device, bring-your-own-device and remote working rules
- Email, internet and social media use
- Backup, patching and basic hygiene the manager must insist on
- Writing policy people read and apply
- Why awareness training usually fails
- Designing a rolling awareness programme
- Running phishing simulations ethically
- Onboarding, role change and exit procedures
- Reporting culture and rewarding near-miss reports
- Measuring behaviour change, not attendance
- Security due diligence before signing a supplier
- Security clauses in contracts and service agreements
- Cloud services and shared responsibility
- Managing contractor and consultant access
- Monitoring and reviewing supplier security
- Responding when a supplier is breached
- Detecting and classifying an incident
- The first hour: containment and decision making
- Incident roles, escalation and communication
- Reporting obligations to regulators and data subjects
- Backups, recovery and business continuity testing
- Post-incident review and lessons learned
- Security obligations under data protection law
- Translating technical risk into business language
- Metrics and dashboards executives actually use
- Preparing for audits and client security questionnaires
- Building the case for security investment
- A ninety-day improvement plan for your organisation
Who Should Attend?
- Heads of department and operations managers
- IT managers and officers who report to non-technical leadership
- Risk, audit and compliance professionals
- Finance managers exposed to payment fraud
- HR managers responsible for staff awareness and onboarding
- Board members and executives accountable for cyber risk
Training Methodology
- Risk assessment workshop on your own organisation
- Live demonstrations of phishing and social engineering techniques
- Tabletop incident simulation against the clock
- Policy drafting clinics
- Case studies of breaches in African and international organisations
- Board reporting practice with peer feedback
Is this course for you?
Level: Intermediate
Problems this course solves
- Security treated as an IT problem while the losses land on finance and operations
- Staff who click, share passwords and approve fraudulent payment requests
- Policies written once, filed, and never followed by anyone
- No incident response plan, so the first hour of a breach is improvised
- Suppliers and contractors with access to systems nobody assessed
- Boards asking how exposed the organisation is, with no answer available
- Security spending decided by whoever shouts loudest, not by risk
Recommended prerequisites
- A management, risk, audit, operations or IT supervisory role
- General computer literacy; no technical or coding background required
- Bring your organisation's current IT policy, if one exists
This course is NOT designed for
- Engineers seeking hands-on penetration testing or network configuration
- Those preparing for a technical certification exam such as CISSP or CEH
- Anyone looking for a data protection law course; see the DPO and Data Privacy programmes
What's Included
Certification
Certificate in Cyber Security Management and Awareness
Issued by: TRUSTGATE CORPORATE SKILLS
Frequently Asked Questions
How long is the Cyber Security Management and Awareness for Organisations Course training?
The Cyber Security Management and Awareness for Organisations Course runs for 5 Days. Each day combines expert-led teaching with practical, hands-on exercises so participants can apply what they learn immediately.
Is the Cyber Security Management and Awareness for Organisations Course delivered online or in-person?
This course is delivered in person (scheduled venues include Kampala, Kigali, Lilongwe, Abuja), live online, or in-house at your organisation.
How much does the Cyber Security Management and Awareness for Organisations Course cost?
The fee is US$600 per person online and US$1,400 per person in person. In-person fees depend on the participant's country; the pricing card on this page shows the fee for yours.
When is the next Cyber Security Management and Awareness for Organisations Course training?
A session is running now, from 2 November 2026 to 6 November 2026 in Kampala, Uganda. The next one runs from 9 November 2026 to 13 November 2026 in Lilongwe, Malawi. You can also request a custom date or an in-house session for your team.
Do I get a certificate after completing the Cyber Security Management and Awareness for Organisations Course?
Yes. Participants who complete the Cyber Security Management and Awareness for Organisations Course receive a certificate of completion from TRUSTGATE CORPORATE SKILLS.
What will I learn in the Cyber Security Management and Awareness for Organisations Course?
Key learning outcomes include: Assess your organisation's cyber risk exposure and prioritise it; Apply a recognised framework such as ISO 27001 or the NIST Cybersecurity Framework at management level; Write security policies staff can follow: access, passwords, devices, remote work; Run a staff awareness programme, including phishing simulations; Recognise and prevent social engineering, business email compromise and invoice fraud.
