Executive Cyber Risk Certificate™

Rather than prioritizing technology, the ECRC program focuses on executive leadership at the intersection of board governance and enterprise cybersecurity risk management. Participants learn to rethink risk leadership and advance cybersecurity excellence through content and case studies that support a mature risk culture, risk-based strategy, enterprise risk management, and performance measurement.

• Governance: governance fundamentals, role and responsibilities of directors, role and responsibility of management, essential security-related objectives, and oversight and duty of care for cybersecurity.
• Corporate Culture and Behavior: organizational psychology and biases, cultivating risk culture, ethics and decision management, personal and corporate accountability, and cultural influences in practice.
• Strategy, Objective Setting, and Performance Management: strategy and objective setting fundamentals, strategic management practices, capital planning and investment control, performance management models and practices, and performance measurement for information security.
• Operational Alignment and Execution: operational alignment, strategic execution, program management practices and models, project management practices and models, and project management cases.
• Enterprise Risk Management (ERM): ERM fundamentals, ERM practices and models, prioritizing and integrating cybersecurity risk for ERM, informing risk prioritization and response with business impact analysis, and promises and perils of cyber insurance.
• Practical Application: leadership case studies and limiting legal exposure through a crisis management deposition preparation exercise.

Registration for the ECRC program includes courses, written materials, scheduled meals and receptions, and the exam. The program fee does not include travel, lodging, or personal expenses. Credit card statements will reflect payment made to CLASS-LLC, which administers the program.