Governance & Compliance

Cyber Risk Governance for Boards

Cyber risk is now a board-level issue affecting operations, finances and reputation. This course helps directors oversee cyber risk: understanding threats, cyber risk appetite, security frameworks, reporting from management, incident and crisis oversight, third-party risk, cyber insurance and regulatory expectations.

5 days Classroom or live online English

Smart Horizon Certified - Global Leadership Consultants

Take the course details with you.

Download the full standard outline: why attend, methodology, objectives, audience, competencies, the daily outline and current plans.

Download course PDF

Why attend

From knowledge to real-world impact.

Boards cannot delegate cyber risk entirely to IT. You will learn the oversight questions and structures boards need.

Workplace challenges

Professional Problems This Course Is Designed to Solve

The programme explores practical approaches to the following challenges. Results depend on how the learning is applied in your organisation.

Difficulty translating subject knowledge into practical workplace decisions.
Inconsistent approaches to the activities covered in the course outline.
Lack of a structured plan for applying and reviewing new skills.

Course methodology

How you will learn.

Board briefings, cyber incident simulations, reporting reviews and case studies.

Course objectives

What you'll take away.

By the end of this course, participants will be able to:

Explain the cyber threat landscape for organisations
Set cyber risk appetite
Understand security frameworks at board level
Evaluate management cyber reporting
Oversee incident and crisis response
Address third-party risk, insurance and regulation

Target audience

Who should attend.

This course is suitable for:

Directors and board members
Audit and risk committee members
Senior executives
Company secretaries
Risk and compliance leaders

Target competencies

Capabilities you will build.

Participants will develop competencies in:

Cyber oversight
Risk appetite
Reporting evaluation
Crisis oversight
Regulatory awareness

Course outline

Your learning journey.

A focused, practical outline with time to explore, apply and reflect.

Day 1Cyber Threats

09:00–10:08Threat actors
10:08–11:00Attack types
11:00–11:30Coffee break
11:30–11:45Attack types (continued)
11:45–12:53Business impact
12:53–14:00Case study

Day 2Governance

09:00–10:08Board responsibilities
10:08–11:00Risk appetite
11:00–11:30Coffee break
11:30–11:45Risk appetite (continued)
11:45–12:53Committee structures
12:53–14:00Exercise

Day 3Frameworks and Reporting

09:00–10:08Security frameworks
10:08–11:00Metrics
11:00–11:30Coffee break
11:30–11:45Metrics (continued)
11:45–12:53Board reports
12:53–14:00Review exercise

Day 4Incidents

09:00–10:08Incident response oversight
10:08–11:00Crisis decisions
11:00–11:30Coffee break
11:30–11:45Crisis decisions (continued)
11:45–12:53Simulation
12:53–14:00Discussion

Day 5Third Parties and Regulation

09:00–10:08Supply chain cyber risk
10:08–11:00Insurance
11:00–11:30Coffee break
11:30–11:45Insurance (continued)
11:45–12:53Regulatory duties
12:53–14:00Action plan

The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.

Dates & venues

Find a session that works for you.

Confirmed dates accept registration requests. Tentative dates are enquiry only.

Good to know

A few things to know.

How is the course delivered?

Our classroom programmes combine facilitated discussion, case studies, exercises and reflection. The precise format will be confirmed before enrolment.

Can you deliver this programme for our team?

Yes, you can enquire about a tailored programme. Share your goals, group size and preferred dates with our learning team.

Will I receive a certificate?

Participants who complete the programme receive a Smart Horizon UK certificate of attendance. Smart Horizon UK programmes are not externally accredited and do not award a professional qualification, licence or designation. Where a course title or outline refers to a professional certification (for example, AACE International's Certified Cost Professional), the programme supports learning and preparation only; the credential itself is awarded solely by the relevant professional body under its own application and examination requirements.

What should I confirm before booking travel?

Please confirm the session, exact venue, accessibility arrangements, fees and any visa requirements with the team before arranging travel. Tentative dates are not confirmed sessions.

Keep exploring

Your next horizon awaits.

All courses

The full course agenda and dates are available above. Use the session links in Dates & venues to choose a session. Registration and quotation forms require JavaScript; you can also contact our learning team directly.