Lead Cybersecurity Manager
Phishing, ransomware and other cyberattacks keep growing in number and in skill. The organizations that handle them well have a planned cybersecurity program and a leader who runs it.
A cybersecurity program is the organized way an organization protects its systems, networks and data. It sets out who is responsible, which risks matter most, which protections to use, how to train staff and how to handle an attack. Two well-known guides for this work are ISO/IEC 27032, the international guidelines for internet security, and the NIST Cybersecurity Framework from the U.S. government. A cybersecurity manager leads the program and reports on it to senior leaders.
The PECB Lead Cybersecurity Manager training course helps you establish, manage and improve a cybersecurity program across an organization. Drawing on ISO/IEC 27032 and the NIST Cybersecurity Framework, it covers roles and responsibilities, risk management, control selection, awareness and incident management.
Course Summary
- Delivery format
Self-study
- Language
English
- Suggested study schedule (The Tech Academy)
14 days at 3 hours a day, about 42 hours in total. Plan more time if the subject is new to you or you want extra practice and revision. PECB plans this course as five days of study, including the exam.
- Included
More than 400 pages of PECB course material, the exam and certification fees and an attestation of course completion worth 31 CPD credits
- Credential
Passing the exam lets you apply for a PECB Cybersecurity Manager credential. PECB awards the level that matches your experience, starting at Provisional Cybersecurity Manager for people new to the field. Certification Requirements, farther down this page, lists every level
Why Should You Attend?
Organizations need people who can lead a full cybersecurity program. This course covers the concepts, strategies, methods and techniques for building and managing a program, based on international standards and industry best practices.
The course prepares you to improve an organization's readiness for cyber threats and to support its ongoing cybersecurity work. After the course, you can sit the exam and apply for the PECB Certified Lead Cybersecurity Manager credential, or the level that matches your experience.
Who Should Attend?
- Managers and leaders involved in cybersecurity management
- People who put cybersecurity strategies and measures into practice
- IT and security professionals who want to advance their careers
- Professionals responsible for cybersecurity risk and compliance
- Executives who make decisions about cybersecurity
Learning Objectives
By the end of this course, you will be able to:
- Explain the concepts, strategies, methods and techniques for implementing and managing a cybersecurity program
- Explain how ISO/IEC 27032, the NIST Cybersecurity Framework and other standards and frameworks relate to each other
- Describe how a cybersecurity program operates and what its components are
- Support an organization in operating, maintaining and continually improving its cybersecurity program
Educational Approach
- Theory combined with practical cybersecurity examples
- Essay-type exercises and multiple-choice quizzes, some based on scenarios
- Quizzes structured like the certification exam
Prerequisites
A fundamental knowledge of cybersecurity concepts and management. The Cybersecurity Foundation course is a good way to build it.
Course Agenda
The topics follow PECB's five-day plan for this course. At your own pace, you work through them in this order.
- Day 1: Introduction to cybersecurity and initiation of a cybersecurity program implementation
- Day 2: Cybersecurity roles and responsibilities, risk management and attack mechanisms
- Day 3: Cybersecurity controls, communication, and awareness and training
- Day 4: Cybersecurity incident management, monitoring and continual improvement
- Day 5: Certification exam
Examination
The PECB Lead Cybersecurity Manager exam covers seven competency domains:
- Domain 1: Fundamental concepts of cybersecurity
- Domain 2: Initiating the cybersecurity program and cybersecurity governance
- Domain 3: Defining cybersecurity roles and responsibilities and managing risks
- Domain 4: Selecting cybersecurity controls
- Domain 5: Establishing cybersecurity communication and training programs
- Domain 6: Integrating the cybersecurity program into business continuity and incident management
- Domain 7: Measuring performance and continually improving the cybersecurity program
PECB's list of exams gives the exam type, duration and available languages.
Certification Requirements
After you pass the exam, you apply for the credential that matches your experience. Every level requires a pass on the PECB Lead Cybersecurity Manager exam, or an equivalent, and a signed PECB Code of Ethics.
| Credential | Professional experience | Cybersecurity project experience |
|---|---|---|
| PECB Certified Provisional Cybersecurity Manager | None | None |
| PECB Certified Cybersecurity Manager | 2 years, including 1 year in cybersecurity | 200 hours |
| PECB Certified Lead Cybersecurity Manager | 5 years, including 2 years in cybersecurity | 300 hours |
| PECB Certified Senior Lead Cybersecurity Manager | 10 years, including 7 years in cybersecurity | 1,000 hours |
Project experience can include a gap analysis of a cybersecurity program, developing a cybersecurity policy, assessing and treating cybersecurity risks, implementing cybersecurity controls, and measuring and reporting cybersecurity performance.
Questions About Enrolling
Does passing the exam make me certified?
Passing the exam lets you apply for a PECB credential, and PECB reviews your application. Foundation credentials are open to everyone who passes the exam and signs the PECB Code of Ethics. For Lead Implementer, Lead Auditor and Lead Manager courses, PECB awards the level that matches your experience. If you are new to the field, you start at the Provisional level and can apply to upgrade as you gain experience. Each course page lists the requirements for every level.
Can I add a portfolio program?
Yes, with ISO/IEC 27001 Foundation, ISO/IEC 27001 Lead Implementer and ISO/IEC 42001 Lead Implementer. Each portfolio program is a separate Tech Academy program with its own price and enrollment.
Explore the portfolio programs and find the one for your courseDo I need a portfolio program to get exam support?
Exam support, including office hours every two weeks for 90 days from enrollment, comes with the ISO/IEC 27001 and ISO/IEC 42001 courses themselves. Portfolio programs are an optional extra, sold separately.
Can I join a portfolio program if I trained with another provider?
Yes. Each portfolio program is sold on its own, for anyone who is taking or has completed the matching training.
