Cybersecurity governance procedures
Taught by Peter Woolley · AI tutor support included
In this lesson, you'll learn how organisations govern and manage cybersecurity risk at board level and across the business.
This lesson is part of a paid course
Buy the course to unlock every video lesson and the AI Tutor, plus mock exams with feedback on CIMA courses.
Already bought? Sign in
Ask the AI tutor anything about this lesson
It knows every lesson in the course — explanations, clarifications, practice questions.
In this lesson
- 0:00 Cyber security governance and risk management
- 1:02 Board responsibility and organisational accountability
- 2:00 Risk management policy framework for cyber security
- 4:07 Third-party and supplier cyber risk considerations
- 6:07 Internet of Things expansion and security implications
- 9:23 Policy communication and staff training requirements
About this lesson
You'll explore the governance structures responsible for cybersecurity, the types of preventative and detective controls that protect systems, and how a centralised approach to risk management works better than fragmented efforts. You'll also discover why cybersecurity is a business-wide concern—not just an IT issue—and how to manage risks from suppliers, partners, and the expanding Internet of Things. The video covers the fundamental stages of cybersecurity risk management: identifying and prioritising threats, selecting appropriate controls using TARA analysis (transfer, accept, reduce, avoid), implementing countermeasures, and establishing contingency plans for when incidents occur. You'll see why cybersecurity policy must be clear and accessible to all employees, not just technical staff, and why training is essential for embedding these practices across the organisation. A key focus is understanding that cybersecurity risk extends beyond your own systems. The lesson explains how to assess risks from business partners, suppliers, and vendors whose digital connections to your systems create additional vulnerabilities. You'll also explore the growing challenge of the Internet of Things—the explosion of web-connected devices from smart home appliances to industrial equipment—and why this dramatically increases both cyber risk exposure and the need for comprehensive governance procedures. This content is relevant to governance and risk management modules across ACCA and CIMA qualifications, particularly where cybersecurity features as part of broader risk and control frameworks.
Duration: 10m
Transcript
Every lesson comes with a full searchable transcript - included with the course.
Get the P3 Objective Test course
All 58 video lessons, timed mock exams marked instantly with an explanation for every question, an AI Tutor in every lesson and lifetime access.
Already bought? Sign in