Information is a paramount key to risk management. Information and communications technology (ICT) is a potentially useful and important tool for all types of users and organisations for improving the efficiency, speed, and accuracy of responses.
This comprehensive training programme is designed for professionals, risk officers or those responsible for ICT/ICT risk management within their entity, aspiring to be proficient ICT risk officers. It covers a broad spectrum of ICT risks, focusing on cybersecurity, data privacy and compliance.
Participants will be equipped with the skills to identify, assess, and mitigate ICT risks in their organisation. The programme includes practical case studies, the latest industry best practices, including DORA/ICT security and risk management, and interactive sessions on risk management frameworks and tools.
Duration: 3h
Language: Available in English and French. The supporting material is only available in English.
Number of participants: up to 15
Available under intra-company course (i.e. dedicated session on demand)
Objectives
By the end of this training, participants will be able to:
- understand the main non-financial risk frameworks;
- define the ICT risk management framework from a regulatory standpoint;
- define the ICT risk governance framework;
- understand the different categories of ICT risks (including threat sources, vulnerabilities and potential impacts);
- define the risk taxonomy relevant to their organisation;
- understand different quantitative and qualitative approaches to assess and measure ICT risks;
- manage and monitor ICT risks in accordance with regulatory and market standards.
Content
- Main regulatory requirements for ICT risk management
- Main obligations for the management body (i.e. Authorised Management or Conducting Officer who is looking after ICT related matters)
- Roles and responsibilities of the ICT risk officer
- ICT risk fundamentals and key concepts
- ICT risk identification and assessment
- ICT risk monitoring and controls
- Case study
Target audience
This course essentially (but not only) addresses to:
- Operations/IT managers
- Operational risk managers
- Compliance managers
- Outsourcing managers
- Internal auditors
Our lead experts
This training is coordinated by Michael Horvath, Partner at PwC Luxembourg.
Michael has acquired a strong financial and regulatory audit as well as advisory background and significant experience leading projects in the asset management sphere.
In the recent past, Michael has been particularly involved in various regulatory projects related to the implementation of the EU regulatory framework for sustainable finance (i.e. SFDR, taxonomy regulation, CSRD) at entity and product level. Michael is involved in various other regulatory projects for clients, from DORA, AML/CFT regulation over CSSF circular 18/698 to MICA.
