How to become an ICT risk officer?

Information is a paramount key to risk management. Information and communications technology (ICT) is a potentially useful and important tool for all types of users and organisations for improving the efficiency, speed, and accuracy of responses.

This comprehensive training programme is designed for professionals, risk officers or those responsible for ICT/ICT risk management within their entity, aspiring to be proficient ICT risk officers. It covers a broad spectrum of ICT risks, focusing on cybersecurity, data privacy and compliance.

Participants will be equipped with the skills to identify, assess, and mitigate ICT risks in their organisation. The programme includes practical case studies, the latest industry best practices, including DORA/ICT security and risk management, and interactive sessions on risk management frameworks and tools.

16 December 2024 (EN) - 9am-12pm - On site

13 May 2025 (EN) - 9am-12pm - On site

Price: 615.00 €

Duration: 3h

Language: Available in English and French. The supporting material is only available in English.

Number of participants: up to 20

You are interested in participating in this course but no sessions are currently scheduled? Please contact us and you will be added to our Show Interest list.

REGISTER

objectifs

Objectives

By the end of this training, participants will be able to:

  • understand the main non-financial risk frameworks;
  • define the ICT risk management framework from a regulatory standpoint;
  • define the ICT risk governance framework;
  • understand the different categories of ICT risks (including threat sources, vulnerabilities and potential impacts);
  • define the risk taxonomy relevant to their organisation;
  • understand different quantitative and qualitative approaches to assess and measure ICT risks;
  • manage and monitor ICT risks in accordance with regulatory and market standards.

Content

  • Main regulatory requirements for ICT risk management
  • Main obligations for the management body (i.e. Authorised Management or Conducting Officer who is looking after ICT related matters)
  • Roles and responsibilities of the ICT risk officer
  • ICT risk fundamentals and key concepts
  • ICT risk identification and assessment
  • ICT risk monitoring and controls
  • Case study

Target audience

This course essentially (but not only) addresses to:

  • Operations/IT managers
  • Operational risk managers
  • Compliance managers
  • Outsourcing managers
  • Internal auditors
intervenant

Our lead experts

This training is coordinated by Michael Horvath, Partner at PwC Luxembourg.

Michael has acquired a strong financial and regulatory audit as well as advisory background and significant experience leading projects in the asset management sphere.

In the recent past, Michael has been particularly involved in various regulatory projects related to the implementation of the EU regulatory framework for sustainable finance (i.e. SFDR, taxonomy regulation, CSRD) at entity and product level. Michael is involved in various other regulatory projects for clients, from DORA, AML/CFT regulation over CSSF circular 18/698 to MICA.

Contact us

Contact details

PwC's Academy, Crystal Park Building, PwC Luxembourg

Tel: +352 49 48 48 4040

Follow us