This workshop is for business analysts and business change professionals providing business analysis services, who wish to extend their understanding of cybersecurity and their ability to integrate cybersecurity concerns with business analysis.  
Key attendees: business analysts; digital change professionals; project managers; risk managers; business change managers; project leaders.  

Business analysts offer key services that support, enable and influence organisational decision-making. They need to be equipped with the knowledge and skills to remain relevant in today’s complex, ever-expanding digital landscape.  
AssistKD’s Cybersecurity and Business Analysis workshop outlines the theoretical foundations and practical applications of cybersecurity. All attendees will extend and enhance their understanding of cybersecurity and the ways in which to integrate the key cybersecurity principles with their business analysis work. Participants will learn how to protect their organisations from cyber threats while enhancing their business analysis skills.  

Upon the completion of this workshop, attendees will be able to demonstrate:

• Understanding of cybersecurity principles and concepts
• Practical skills to perform cybersecurity risk assessments, secure data flows and incorporate cybersecurity into every stage of their projects
• Awareness of the IIBA BABOK knowledge areas and BACCM with cybersecurity extensions
• The ability to write persuasive cybersecurity business cases
• Understanding of how to contribute to an organisation’s cybersecurity strategy. 

To give you further details about what you’ll learn and how the course will help you, here’s a quick guide to the day.

A printed copy of the course manual will be sent to your home address in good time for the start of your course. Our delegates tell us that having access to a physical document is beneficial as both a reference document and for taking notes during the course. In addition, a link will be emailed to you to enable you to access an electronic copy of the same manual for convenient future reference. 

No

Cybersecurity and Business Analysis Workshop (a one-day workshop)

Course Content

An Introduction to Business Analysis and the Cybersecurity Mindset:

• Explore the intersection of business analysis and cybersecurity with real-life cybersecurity incidents.
• Understand the critical role business analysts can play in safeguarding organisational assets.
• Develop a cybersecurity mindset essential for identifying and mitigating risks.
• Hands-on exercise on security mindset

Foundation in Cybersecurity Concepts:

• Gain a comprehensive overview of fundamental cybersecurity principles.
• Learn about common cyber threats, vulnerabilities, and the landscape of cybersecurity based on real-life incidents.
• Understand key terminologies and concepts crucial for effective communication with IT and security teams.

Practical Skills to Perform Cybersecurity Risk Assessments:

• Acquire practical tools and methodologies for conducting cybersecurity risk assessments.
• Learn to identify, analyse, and prioritize potential risks to business operations.
• Develop the ability to create actionable mitigation plans.
• Hands-on exercise on creating a Risk Register, identifying an asset, recognising the threats and vulnerabilities, prioritising them and recommending the mitigation solutions.

Practical Application of the "Business Analysis and Cybersecurity" Framework:

• Dive into the practical application of Business Analysis and Cybersecurity Framework (© 2024 I-Perceptions Consulting Ltd) designed to incorporate cybersecurity within business analysis.
• Hands-on exercise to apply the framework in various business contexts.
• Collaborate with peers to discuss strategies and solutions, enhancing your practical understanding.

Data Security:

• Understand the principles of data security
• Overview on data classification
• Difference between data security vs cybersecurity
• Hands-on exercise to securing process flows  

Cybersecurity Extensions to IIBA BABOK:

• Explore how cybersecurity can be extended into the IIBA BABOK knowledge areas  
• Learn about cybersecurity extension to IIBA Business Analysis Core Concept Model (BACCM) checklist
• Hands-on exercise on planning a stakeholder engagement plan which includes cybersecurity  
• Hand-outs on BABOK Knowledge Areas Extension to Cybersecurity and BACCM Cybersecurity Extension checklist

Incorporating Cybersecurity in Every Stage of the Project by Shifting Left:

• Understand the concept of “shifting left” in cybersecurity.
• Learn how to integrate security considerations from the earliest stages of a project.
• Develop strategies to embed cybersecurity into every phase of the project lifecycle.
• Practical implementation of extending business analysis toolkit to cybersecurity at all phases of the project.  
• Hands-on exercise in writing cybersecurity requirements, creating cybersecurity personas and scenarios  

Contributing to a Cybersecurity Business Case, Incident Response and Business Continuity Plans:

• Components of a cybersecurity business case
• Learn the challenges of writing a cybersecurity business cases
• Articulating the value of cybersecurity initiatives to stakeholders
• Provide support in write compelling business cases that highlight the importance of cybersecurity investments based on cybersecurity industry standards and recommendations.
• Support in creating an incident response and business continuity plans