Information Security Management Education

Information Security Management Education Career Development for Information Security Management Professionals www.solvay.edu/infosec NEW PORTFOLIO INCLUDING Cybersecurity Information Security Governance Executive Master education

INFORMATION SECURITY MANAGEMENT This education has allowed me to move within ING into a more interesting and challenging position where I can use the knowledge gained during the two years. JEREMY GRANDCLAUDON Information Risk Officer - ING Belgium, Alumnus 2013 All lecturers at Solvay have been great in providing enormous amounts of information during the evening week sessions. Thanks to all of them, for their commitment, patience and open discussions providing very good knowledge and support. DANIEL OCAMPO ITD Telecomm - FedEx Express Colombia, Alumnus 2010 Broader security and audit knowledge, extension of my professional network, preparation for CISA and CISSP certification A solid and complete background, I would recommend to anyone this executive programme, under the great and inspiring guidance of Prof. Georges Ataya. GEERT NOBELS Regional Sales Manager BeLux - Zscaler Inc, Alumnus 2008 This education provided me with the right knowledge, experience, networking, and confidence to kick-start my career and achieves the professional and personal objectives which I had set myself. I felt invigorated, empowered and assertive to grow and to what I really wanted. DAVID BRITO DA SILVA Officer, Project (Data) Manager - NATO AirC2 Agency, Alumnus 2012 // 2

WELCOME WORD OF THE ACADEMIC DIRECTOR Since 2003, Solvay Executive Education has been setting new teaching and research standards in the areas of Information Technology Management, Information Security, Risk, Audit, Compliance and IT Value. Over a decade s worth of successful executive education has enabled hundreds of participants to acquire essential business and managerial knowledge and boost their career as a direct result. Major research and new developments in management practices, frameworks and bodies of knowledge enrich our curriculum, year after year. Many of our lecturers have played important roles in advancing research and releasing influential publications examining the governance, risk management and value realisation of Information Technology. Each year, more than one hundred academic lecturers, expert speakers, staff and participants are involved in this harmonious set-up, delivering a top-notch education that receives a high rate of satisfaction and overwhelmingly positive feedback from graduating participants. Many graduates come back in subsequent years to acquire knowledge in recently-emerging areas, attend newly-offered modules or transition to General Management, Finance, Marketing or Leadership-related lifelong learning programmes. Others call upon us for in-company education in order to share knowledge with their management and colleagues. Others seek professional certifications and accreditations by capitalising on previously-acquired expertise. We at Solvay Executive Education are proud to accompany participants along their career path and to provide them with a window into recent publications, academic research and professional expertise. PROF. GEORGES ATAYA Academic Director Information Security Management Education 3 //

STRUCTURE OF THE EDUCATION EXECUTIVE MASTER Executive Master in Information Risk and Cybersecurity S G M B This two-year education brings essential managerial knowledge, practices and concepts required by Information and Communication Technology (ICT) and business professionals with management and governance-level responsibilities over Information Security Management, Cybersecurity, Risk and Compliance Management on the Belgian, European and global markets. The body of knowledge is delivered through lectures, workshops, case discussions, group works and personal essays, as well as via the participant Intranet system containing electronic documents, shared links, and all presentation material. Cutting-edge knowledge is also disseminated by guest speakers, topic leaders, and peer participants. EXECUTIVE MASTER: 288 contact hours to be attended over one or two years - 36 ECTS All lectures are conducted as evening classes from 06.15 pm to 09.30 pm during week days. // 4

4 SPECIALISED TRACKS Mix-and-match these specialisations to boost your knowledge level S Information Security The Information Security track combines Information Security Management skills and CISO practices with Security technology essentials. Cybersecurity fundamentals and implementation topics are addressed along with a workshop to develop a phased Information Security plan. G IT Governance The IT Governance track brings the foundations for the governance of Enterprise IT. CIOs own challenges and solutions are shared, followed by IT process management framework and its hands-on workshops and finally IT Risk methods and legal concerns. M IT Management The IT Management track addresses various activities related to the IT Function including build, run, operate and sourcing management. Application development, service management and sourcing practices are lectured through references to recognised frameworks and methods. B Business Agility The Business Agility track supports the building of an agile enterprise through enterprise and IT Architecture methods and frameworks, business transformation, process improvement techniques, as well as agility principles and innovation for building a sound digital Business platform. 5 //

EXECUTIVE PROGRAMMES Executive Programme in Security Governance S G This programme is designed for current and future managers with responsibilities over information security, related governance and decision making processes. Executive Programme in Information Security S B This programme is intended for current and future Information Security Managers, Chief Information Security Officers, Risk Managers, and Compliance Officers. It delivers essential knowledge in Information Security and in management practices for information security as well as implementation knowledge for agile digital platforms. Executive Programme in Cybersecurity S M This programme is designed for current and future Cybersecurity experts, as well as Information Security technical experts. It develops skills in cybersecurity management with operational hands-on knowledge information security activities. EXECUTIVE PROGRAMME: 144 contact hours to be attended over one year - 18 ECTS // 6

ACADEMIC OBJECTIVES Acquire the essential managerial knowledge required by all Information and Communication Technology (ICT) and business professionals with management and governance-level responsibilities over Information Security. Master the use of relevant bodies of knowledge and share this knowledge with IT and business professionals via top-level local and international specialists. Be able to promote the development of Information Security Management, Cybersecurity, Risk and Compliance Management on the Belgian, European and global markets. Benefit from an enriching learning experience shared with a diverse audience of high potentials and seasoned professionals. Boost your career trajectory with the knowledge acquired and the contacts established throughout the programme. The Executive Education in Information Security Management will undoubtedly sharpen the career profile and boost the professional prospects of all participants, who will also benefit from a strong alumni network and an array of events and networking opportunities. 7 //

PROGRAMME CONTENT The Executive Information Security Management Education portfolio is composed of 12 core modules spread over 4 specialised tracks. S Information Security G IT Governance JAN-MAR Information Security Management (Module S1 24 hours) Management practices including major frameworks and bodies of knowledge. Lectures and practical cases related to various Information Security and Cybersecurity challenges. JAN-MAR The CIO Foundation (Module G1 24 hours) An overview by experienced executives and practitioners of key CIO/IT executive challenges covering subjects like Governance, Value Management, Sourcing, Innovation, Communication and Strategy Planning. APR-JUNE IT Security Practices (Module S2 24 hours) Overview of technology-related topics for necessary IT Security expertise. Lectures and cases by hands-on practitioners and academic experts addressing essential domains. APR-JUNE IT Governance Workshop (Module G2 24 hours) IT Governance implementation starting from business and IT goals. Assess, organise, build organisational capabilities through IT Processes and enablers. Prepares for COBIT 5 foundation certification. SEPT-DEC Cybersecurity Workshop (Module S3 24 hours) Presentation of concerns, managerial and technical responses in relation to major Cybersecurity challenges. Build a full phased environment-specific security/cybersecurity plan. SEPT-DEC IT Risk and Legal Concerns (Module G3 24 hours) Gain a broad view on all IT related risks enterprises are faced with, with special attention to legal and compliance aspects. Apply the leading COBIT 5 for Risk framework to a practical case study. ASSESSMENT Each module is concluded by an assessment (multiple choice questionnaire, short assignment, workshop, report writing and/or presentation before a panel jury) to validate the completion of the module. An acceptance and an close-down interview are required from all participants. // 8

M IT Management B Business Agility Application Build and Management (Module M1 24 hours) Enterprise Strategy and Architecture (Module B1 24 hours) JAN-MAR Principles of Application Management Practices, including organisation, architecture, development methods, governance, security, deployment and technical foundations. JAN-MAR Develop skills and practices for the management of Enterprise and IT Architecture, developing programmes and portfolios and implementing alignment for business value. APR-JUNE IT Service and Run Management (Module M2 24 hours) Develops the skills for operations and service managers by delivering ITIL, ISO 20000 skills and other operation-related knowledge. The module also provides preparation for the ITIL foundation exam. APR-JUNE Business Transformation (Module B2 24 hours) Develop skills for business enablement, including Transformation and Change Enablement, Project and Programme Management, business process analysis and improvement practices. SEPT-DEC IT Sourcing Management (Module M3 24 hours) Principles for sourcing management, including procurement and sourcing frameworks (escm) with practical, hands-on applications: Vendor Management, Human Resources management and IT skills frameworks (including SFIA). SEPT-DEC Digital Agility and Innovation (Module B3 24 hours) Changing the digital technology paradigm by seeking business and IT agility, by innovating through new technology and by building sound platform layers. 9 //

CERTIFICATE DELIVERED At the end of the programme or the master education, Solvay Brussels School of Economics and Management delivers a certificate of Executive Education to successful participants who: Have obtained an overall average of 60% for the whole education and passed all the exams (above 50%) Presented his/her close-down assignment (Executive Summary) Attended at least 70% of the overall lectured programme HOW TO APPLY? 1 Complete the application form (available on www.solvay.edu/infosec) 2 Attach your CV, other relevant documents (certifi cates) & ID picture 3 Submit these documents (see Contact) 4 Attend an acceptance interview ADMISSIONS Participants must hold a University degree or demonstrate a relevant professional experience. Proficiency in English is a must. Applicants will have to complete an application form and will be invited to an acceptance interview. ACCEPTANCE INTERVIEW This meeting is designed both to assess prospective participant s ability to actively take part in the proposed programme and to guide them in making the most suitable choices for their current activities and needs. Prepare carefully and make sure any additional queries you may have are answered. // 10

PARTICIPANTS PROFILE Information Security & Cybersecurity professionals receive managerial education and various IT management-related methods, frameworks and practical expertise in the areas that would steer their career. Professionals with a non-technical background will be able to acquire the essential knowledge required to keep up with peers with a more technologically-focussed background. Professionals with a technical background gain understanding of management practices allowing them to keep up with management, clients, regulators and business users. The Information Security Management Education portfolio addresses a wide spectrum of professional needs. International Participants Nationalities (2011-2014) Spain UK Morocco USA Italy Bulgaria Cameroun Brazil Poland Russia Rwanda Jordan France Albania Senegal Turkey Ireland Ukraine Tunisia India Romania Ethopia Venezuela Portugal Nigeria Mexico Participants Sector (2011-2014) IT services Consulting Public Services Banking / Insurance NGO Pharmaceutical / Chemical Manufacturing Services Telecom 11 //

ACADEMIC STAFF ACADEMIC MANAGEMENT Prof. Georges Ataya Academic Director Frédéric Roos Academic Programme Manager Sushil Chatterji Academic Mentor TOPIC LEADERSHIP The Topic Leaders ensure lecturers participation, content delivery and examination. Together with the academic management they track the adequacy of the body of knowledge on a continuous basis and adjust to recent researches, developments and publications. Jean-Luc Allard Cybersecurity Workshop (S3) Cathy Coolen IT Sourcing Management (M3) Pieter Dubois Management of Applications Development (M1) Stephane Jans Enterprise Strategy and Architecture (B1) Frédéric Lemoine Digital Agility and Innovation (B3) Liviu Luca IT Governance Workshop (G2) Erik Van Zuuren IT Security Practices (S2) Mathieu Noteris IT Service and Run Management (M2) Aurelien Slodzian Business Transformation (B2) Dirk Steuperaert IT Risk and Legal concerns (G3) Marc Vael Information Security Management (S1) Daniel van den Hove The CIO foundation (G1) // 12

ACADEMIC & GUEST SPEAKERS More than 50 Academic and Guest Speakers lecture, deliver teaching sessions and/or direct workshop sessions. Subject matter experts are invited to share their knowledge and experience on specific sessions pertaining to their own expertise. The list indicates some of those who lecture in Information Security Management Education: Jean-Paul Adans M-Team Philippe Bardyn BNP Paribas Fortis Wim Bartsoen BNP Paribas Fortis Nick Boucart Sirris Robert Clement PSA Antwerp Marc Delbaere Swift Sebastien Deleersnyder SAIT Zenitel Hans Dobbelaere Quintgroup Peter Dockx GDF SUEZ Jelle Gacoms Health Connect Steven Goeman GAPs Hans Hujoel Gartner François Koeune K2Crypt Steve Mann SM2 Ltd Nico Marien TeamProsource Jonathan Rolin Allianz Alex Slaets Smals Herwig Thyssens Deloitte Carl Tilkin-Franssens Acerta Toon Timbermont Skryv Peter Vander Auwera Swift Philippe Van Belle AG Insurance Patrick Van Eecke DLA Piper Stefan Van Gansbeke LCM Johan Van Grieken Deloitte Tanguy Van Overstraeten Linklaters André Vanden Camp Axa Belgium Yves Vandermeer Federal Computer Crime Unit Werner Verlinden Musena Consulting 13 //

AN INTERNATIONAL NETWORK With 20.000 members throughout the world, Solvay Schools Alumni actively participates in the organisation of training courses, information and exchange sessions, networking and social activities. IT Management Education participants automatically qualify to become part of this international network. In addition, newly created modules are open to alumni giving them access to additional domains of knowledge. More info: www.solvay.edu/it-alumni IT MANAGEMENT EDUCATION In addition to these series of education programmes, Executive Education is also available in IT Management: Executive Master in IT Management Executive Programme in CIO Leadership Executive Programme in Enterprise and IT Architecture Executive Programme in CIO Practice Executive Programme in IT Sourcing Executive Programme in Business Agility Executive Programme in Management Consulting More info: www.solvay.edu/it-management HELPING IT PROFESSIONALS GET CERTIFIED! Running in affiliation with ISACA and IT Governance Institute (ITGI ), above mentioned Executive education programmes address international frameworks and standards such as COBIT, ITIL, ISO27001, CMMI, PMBOK, TOGAF, etc. Courses refer to bodies of knowledge and guidelines from Certification Organisations, helping to prepare for internationally renowned professional certificates (CISA, CISM, CISSP, CRISC, CGEIT, ITIL, TOGAF, etc). // 14

PRACTICAL INFORMATION LANGUAGE English DURATION Executive Master involves 288 attendance hours (36 ECTS) Executive Programmes involve 144 attendance hours (18 ECTS) Each module is composed of 8 sessions of 3 hours plus one session devoted to the examination. LOCATION Avenue F.D Roosevelt 42 - CP114/01 - B-1050 Brussels, Belgium REGISTRATION All year round CALENDAR Information Security Management Education courses start in January PROGRAMME FEES More info www.solvay.edu/infosec Discover our financial benefits at www.solvay.edu/financials-benefits CONTACT VINCENT DEGARDIN Programme Coordinator +32 (0)2 650.43.73 it@solvay.edu INFORMATION SESSIONS Regular information sessions are planned where potential participants discuss all aspects of the Information Security Management Education with core faculty. The date of the next information sessions are published on www.solvay.edu/it 15 //

Information Security Management Education Career Development for Information Security Management Professionals www.solvay.edu/it Université libre de Bruxelles Avenue F.D Roosevelt 42 - CP114/01 B-1050 Brussels, Belgium Tel: +32 (0)2 650.43.73 www.solvay.edu/infosec GRAPHISME : WWW.IDFIRST.BE