Specialist Preparation Program in Cybersecurity for Business

Program facts

Study fee

Free

subjects

3

lessons

15

Estimated time

15 hours

Content last reviewed

21 October 2026

Access period

30 days

Study language

Arabic and English

About the program

Practitioners map a service and dependencies, frame business-impact risk, specify controls, review identity, data and suppliers, triage incidents, validate recovery and turn results into a roadmap and decision brief. Cases use fictional data and identify evidence, ownership and authority limits.

Practical relevance

Outputs can transfer to organizational registers and tools after context and authority are checked; learning requires no real organizational data.

Why this program

Business cybersecurity requires connecting technology to service and decision, not a tool list. The program builds a trail from input to verification and escalation.

What you will learn

• Translate a broad service name into an operating, asset and dependency map reviewed by the service owner.
• Create a risk record that connects uncertainty to a business outcome and response decision.
• Select preventive, detective and corrective measures and state how the team will know that they work.
• Perform a scoped access, data-flow and supplier assurance review.
• Turn a fragmented alert into an incident record, escalation decision and recovery validation plan.
• Convert registers, tests and exceptions into fundable, trackable decisions.

Who it is for

• Designed for operations, technology, risk, continuity and supplier-management practitioners who perform defined cybersecurity tasks and need reviewable outputs: service maps, risk records, control criteria, access reviews, incident records and improvement plans. It is not intended for offensive penetration-testing training or for anyone seeking authority to accept risk or issue legal or regulatory determinations for an organization.

Curriculum

1. Subject 1 Open for free

   Business services and cyber risk

   This module connects a business-service outcome to the assets, data, people and suppliers that enable it, then converts that understanding into reviewable risk scenarios. Learners map dependency direction, estimate time-based business impact, build a purpose-bounded threat model, and verify that each scenario states cause, event and consequence rather than a list of concerns. They also apply treatment and exception choices with an owner, expiry and exit indicator. The outputs are a service map, impact analysis, risk register and treatment decision that a service owner can review without false precision or unauthorized risk acceptance.

   5 lessons · 4.5 hours

   1. Scoping a business service and mapping dependencies 1 hours
   2. Writing risk scenarios and setting priorities 1 hours
   3. Business impact analysis and recovery objectives 40 min
   4. Threat modeling and scenario validation 44 min
   5. Risk treatment and exception governance 40 min
2. Subject 2

   Controls, identity and supplier assurance

   This module turns priority risks into testable controls by defining the outcome, tested account or asset scope, owner, evidence and failure condition. Practice then expands to identity lifecycle and privileged access, data classification and minimization, and supplier and cloud-service assurance. Learners separate control design from operation and distinguish supplier assertions from evidence covering the relevant service, period and entity. They test allow, deny, revoke and recovery cases instead of relying on policy documents. Outputs include control cards, an access review, a data-flow record and a supplier-assurance package linking each gap to an action, due date and escalation boundary. Review conclusions remain limited to the service, period, and account or asset scope actually tested.

   5 lessons · 4.5 hours

   1. Selecting controls and writing testable acceptance criteria 1 hours
   2. Managing identity, data and suppliers with evidence 1 hours
   3. Identity lifecycle and privileged access 52 min
   4. Data classification, minimization and protection 44 min
   5. Supplier and cloud-service assurance 48 min
3. Subject 3

   Incidents, improvement and decision support

   This module joins detection, response, recovery and improvement into one decision chain. Learners begin with a specific detection question and known log source, then test coverage, alert behavior and failure cases. During an incident they separate facts from hypotheses, preserve a decision log, and tailor communication to audience, confidentiality and timing. After containment, component startup is not treated as recovery; business transactions, data integrity and support capacity must be demonstrated. The module concludes by converting observations into actions with owners, measurable denominators and escalation thresholds. Outputs are a detection rule, incident record, communication plan, recovery test and trackable learning review.

   5 lessons · 4.5 hours

   1. Triage, escalation and recovery validation 1 hours
   2. Improvement roadmap, executive reporting and handover 1 hours
   3. Detection engineering and log coverage 44 min
   4. Incident communication and decision logging 38 min
   5. Recovery validation and post-incident learning 48 min

Subjects unlock in sequence as you progress.

Strengths

• Security connected to business-service outcomes
• Traceable evidence and decision boundaries
• Bilingual cases and practice without real organizational data

Evidence basis

Concepts use official NIST and CISA sources and original fictional examples. Mentioning a source confers no external accreditation or legal judgment.

Assessment

Assessments follow the program blueprint and may use module assessments, a final assessment, or a combination, under the approved attempt policy.

Assessment attempts: 2 per assessment, 7 days apart

The pass mark is announced before the program is published.

Certificate

The credential confirms completion and successful assessment; it does not represent professional licensure unless explicitly and lawfully stated.

Every certificate has a public verification code. Verify a certificate

Verification example: a real issued certificate

Program questions