Day 1: Reading Cyber Threats and Digital Risk Exposure

Cyber Threats and Digital Risk Exposure

• Identify common relevant cyber threats
• Map threats to exposed assets
• Separate likelihood from potential impact
• Prioritize threats needing stronger controls

Digital Risk Asset Exposure

• Identify assets requiring stronger protection
• Assess threats vulnerabilities likely impact
• Choose controls proportionate to risk
• Prepare readiness and gap summary

Digital Risk Cyber Risk Framework

• Map security exposure across services
• Assess control gaps against threats
• Prioritize actions reducing highest exposure
• Assign ownership for security follow-up

Day 2: Applying Identity, Policy, and Data Protection Controls

Digital Risk Security Roles and Policies

• Identify ownership gaps affecting delivery
• Clarify business technical team interfaces
• Define approval points for decisions
• Test role clarity through scenario

Digital Risk Identity and Access

• Identify roles needing elevated access
• Apply least privilege for work
• Reassess access after role changes
• Build access-control review checklist

Digital Risk Data Protection and Encryption

• Identify data requiring encryption protection
• Select encryption controls across states
• Manage keys under approved responsibilities
• Verify encryption effectiveness after changes

Day 3: Managing Vulnerabilities, Suppliers, and Risk Improvement

Digital Risk Vulnerability and Patch Control

• Inventory systems requiring security updates
• Rank vulnerabilities by exposure impact
• Validate patches through controlled changes
• Monitor exceptions until risk resolution

Digital Risk Supplier Risk

• Identify suppliers supporting critical services
• Assess dependency security continuity exposure
• Define minimum controls for providers
• Track high-risk issues through treatment

Digital Risk Improvement Plan

• Phase priority improvement actions
• Match activities to available capacity
• Set milestones exposing delays early
• Establish cycles for plan review

• Guided analysis of cyber threat landscape and digital risk using workplace evidence
• Practical exercises developing capability in security policies and responsibility allocation
• Scenario review testing decisions around vulnerability and patch management
• A capstone activity creating a digital-risk improvement plan ranked by exposure and urgency