Global Learning for Operational Leaders
Classroom
14 sessions
Scroll for more
Online / Live
14 sessions
Scroll for more
Introduction
Course overview
The NIST Cybersecurity Framework is one of the most widely used approaches for managing cyber risk, and version 2.0 adds a dedicated Govern function and broader applicability to organisations of all sizes and sectors.
This Aractech course explains the CSF 2.0 structure, functions, categories and profiles, and shows how to assess current cybersecurity posture, define target profiles, prioritise gaps, integrate cyber risk with enterprise risk management and report to leadership. Participants build current and target profiles for a case organisation.
The course bridges technical security controls and business risk decisions.
What you will achieve
Learning objectives
- Explain the structure and purpose of NIST CSF 2.0
- Apply the Govern, Identify, Protect, Detect, Respond and Recover functions
- Assess current cybersecurity posture
- Define target profiles and prioritise gaps
- Integrate cyber risk with enterprise risk management
- Report cyber risk to executives and boards
Who should attend
Target audience
- Information security managers
- IT and risk managers
- Compliance professionals
- Internal auditors
- CISOs and security architects
- Consultants
Methodology
Learning approach
- Framework walkthroughs
- Profile-building workshops
- Case studies
- Risk discussions
- Reporting exercises
Complete course outline
Five focused days of learning and application
The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.
Day 1
Cyber Risk and CSF 2.0
- Cyber threat landscape
- Cyber risk concepts
- CSF 2.0 overview
- Changes from earlier versions
- Coffee break
- Changes from earlier versions (continued)
- Mapping to other standards
- Exercise: Framework orientation
Day 2
Govern and Identify
- Cybersecurity governance
- Roles and policy
- Supply chain risk
- Asset management
- Coffee break
- Asset management (continued)
- Risk assessment
- Workshop: Governance assessment
Day 3
Protect and Detect
- Identity and access
- Data security
- Platform security
- Monitoring
- Coffee break
- Monitoring (continued)
- Detection processes
- Exercise: Control gap review
Day 4
Respond and Recover
- Incident response
- Communication
- Recovery planning
- Improvements
- Coffee break
- Improvements (continued)
- Testing
- Case study: Ransomware response
Day 5
Profiles and Reporting
- Current and target profiles
- Gap prioritisation
- Roadmaps
- Coffee break
- Roadmaps (continued)
- Metrics
- Board reporting
- Capstone: CSF improvement roadmap
FAQ
Frequently asked questions
What does Cybersecurity Risk Management with the NIST CSF 2.0 (IMCS-011) cover?
This course covers IT Management and Cyber Security through a structured five-day outline focused on practical application, discussion, and implementation planning.
When is the next available session?
The next scheduled session starts on 16 - 20 November 2026. See the course schedules section for the available dates and delivery formats.
Who should attend this course?
Information security managers, IT and risk managers, Compliance professionals
Is bilingual course delivery available?
Yes. All course materials and presentations are provided in English, while bilingual explanation and discussion support may be available depending on the selected location and trainer availability. For example, when attending a course in Istanbul, you may request a Turkish-speaking trainer to explain the English course content in Turkish. Arabic explanation support may also be requested at this location. Other languages are available in selected cities. You can choose your preferred language support as an optional preference during registration.
How can I register for a session?
Use any Register button next to the available course dates to open the participant registration page and submit your booking request for the selected session.
Is this course available online as well as classroom-based?
Check the course schedules section for currently published classroom and Online / Live sessions.
Where are classroom sessions delivered?
Current classroom venues include Amsterdam, London, Frankfurt, Munich, Barcelona, Rome.
How long is the training programme?
The programme runs for five days from 09:00 to 14:00, which gives 25 contact hours, including a daily 30-minute break (22.5 hours of instruction).
Quick request
Send quick request
Send a fast enquiry about this course and the academy team will get back to you.
Get a quotation
Request a formal quotation
Choose an available date and venue, add your participants, and we will email a formal quotation for Cybersecurity Risk Management with the NIST CSF 2.0 to your business address.