GovTech's CIO Milestone Course - Cybersecurity

Overview

GovTech’s CIO Milestone Course (previously known as CIO Milestone Programme) empowers CIOs to adopt a strategic role within their agencies, influencing and driving the digitalisation agenda through innovative use of technology.

A comprehensive programme paced out over six months, it is specially designed for you to acquire deeper understanding of emerging and evolving facets of digital leadership; digital business models, sharpen your ability for high-impact stakeholder influence and distil the learnings from government digitalisation case studies that will benefit your agencies directly.

As Chief Information Officers (CIOs), be equipped with the right knowledge and tools to drive your digitalisation journey at your respective agencies. The course is carefully designed by practitioners, for practitioners to ensure that you can apply your learnings to solve real-world problems faced by agencies.

GovTech’s CIO Milestone Course – Cybersecurity enhances CIOs' cybersecurity knowledge, covering fundamental principles, risk assessment, and incident management. It emphasises the CIO-CISO partnership in strengthening agency cybersecurity posture and preparing for potential incidents.

Key Takeaways

• Understand the intends of the various underlying cybersecurity principles. This will provide the groundings to prepare the CIOs to appreciate the other LOs
• Understand the risk management process and the key considerations. Addressing the risks will often require the CIO to take certain remedial actions (e.g. deploy cybersecurity controls) that impact the IT infrastructure
• Understand the possible types and categories of cybersecurity controls to address cybersecurity risks
• Evaluate the effectiveness of the cybersecurity incident response plan of the agency through exercising of the plan, working in conjunction with CISOs
• Understand the need to include cybersecurity requirements early in the software development process and the need for a cross-functional team involving CISOs through public or a private sector use cases