Professional Mini-Master in Cybersecurity Leadership and Digital Resilience

Program facts

Study fee

Free

subjects

5

lessons

20

Estimated time

22.5 hours

Content last reviewed

22 October 2026

Access period

60 days

Study language

Arabic and English

About the program

The program begins with a critical business service and its disruption and data-loss limits, then turns those into a reviewable risk scenario and investment decision. Architecture lessons map transaction paths and trust boundaries, then design resource access, detection and time-bounded exceptions. Incident leadership connects impact classification with containment, truthful communication and verified improvement. Recovery distinguishes a running server from a valid transaction and tests backups, restoration and common dependencies across regions. Supplier lessons finish with criticality tiers, an executable exit, an evidence-aware scorecard and a twelve-month roadmap under budget and capacity constraints. Cases and numbers are fictional teaching assumptions; learners practice stating uncertainty and testing alternatives before accepting risk.

Practical relevance

Use a provided fictional case or a service you know: map its path and objective, compare controls, design an exercise capable of failing, and write an owned, dated decision. Exercises do not require confidential data or running tools on your organization's systems.

Why this program

Tool indicators can look healthy while customers cannot complete a transaction, and a discussion exercise can pass while real restoration fails. The program connects service owners, security, operations and procurement around one evidence trail and clear decision rights. Learners compare availability with transaction integrity and control cost with residual risk, and use the state “unverified” when a necessary test is absent.

Career relevance

The material relates to cybersecurity leadership, risk management, resilience, service operations and governance roles. It develops professional judgment and cross-functional communication; it does not promise employment or promotion and does not grant a professional license or university degree.

What you will learn

• Turn risk appetite into testable service tolerance and investment decisions
• Map a critical service and design bounded access, detection and exceptions
• Lead incidents with preserved evidence, truthful updates and testable improvement
• Test RTO, RPO, clean restore and shared regional dependencies
• Tier suppliers and build a scorecard and annual resilience roadmap

Who it is for

• Professionals and managers with a foundation in digital services and risk who seek advanced cybersecurity decisions
• IT and operations managers responsible for the continuity of digital services and recovery from incidents.
• Risk, governance and audit officers who need to evaluate cybersecurity programmes and report clearly to the board.

Curriculum

1. Subject 1 Open for free

   Decision governance and risk boundaries

   Start a security decision with a service, an objective and an explicit tolerance rather than an abstract threat list.

   4 lessons · 4 hours

   1. From a service objective to a risk boundary 57 min
   2. Build a causal risk scenario under uncertainty 57 min
   3. Choose a control portfolio, not a shopping list 57 min
   4. Who decides, and what does the board see? 57 min
2. Subject 2

   Control architecture and verifiable trust

   Map a critical transaction from user to data and external dependency, including trust boundaries and actual privileges.

   4 lessons · 4 hours

   1. Map the service and trust boundaries before buying a control 57 min
   2. A resource access policy that can be tested 57 min
   3. Cover the attack path and measure response capacity 57 min
   4. A bounded exception and a compensating control you can prove 57 min
3. Subject 3

   Incident leadership under uncertainty

   Classify an incident by service effect and available evidence, not by the label on its first alert.

   4 lessons · 4 hours

   1. When to declare an incident and how to lead the first hour 57 min
   2. Contain spread without destroying service or evidence 57 min
   3. Communicate what is known and when it may change 57 min
   4. A review that changes a control, not only a narrative 57 min
4. Subject 4

   Recovery design and digital resilience

   Separate recovery time objective (RTO) from maximum tolerable disruption (MTD) and recovery point objective (RPO), the allowable age of lost data.

   4 lessons · 4 hours

   1. Start impact analysis with a service and end with a feasible recovery objective 1 hours
   2. Clean restoration after ransomware: sequence before the restore button 57 min
   3. Design an exercise that exposes recovery failure before a crisis 57 min
   4. Find the shared dependency before approving regional resilience 1 hours
5. Subject 5

   Supply chain and integrated executive program

   Tier a supplier by the effect of its loss, privilege and proven substitution time, not annual contract value.

   4 lessons · 4 hours

   1. Tier suppliers by service dependence, not contract value 57 min
   2. Make supplier assurance and exit a tested capability 1 hours
   3. Build a scorecard that changes decisions without rewarding hidden incidents 1 hours
   4. Defend a twelve-month security and resilience roadmap during supplier disruption 1 hours

Subjects unlock in sequence as you progress.

Strengths

• Decision cases that connect risk to service outcomes
• Response and recovery exercises that can fail and expose evidence limits
• One roadmap connecting security to suppliers, contracts and budget

Evidence basis

Teaching uses scoped passages of NIST CSF 2.0 and NIST guidance on risk assessment, zero trust, incident response, contingency planning and supply chain risk. The frameworks are voluntary; fictional numbers are neither legal duties nor mandatory thresholds.

Program questions

Certificate

Verification example: a real issued certificate