The purpose of the practitioner qualification is to understand what effective cyber resilience looks like and what the risks and issues that can easily hit cyber resilience. Individuals will understand how to get the best balance of risk, cost, benefits and flexibility within an organization.
The qualification is aimed at professionals within the IT and security functions; risk and compliance functions. Other core business functions including HR, Finance, Procurement, Operations and Marketing, will also benefit from having cyber resilience expertise within the team, often including a local champion or mentor for all staff to refer to.
The RESILIA qualifications have been developed to offer two levels of qualification: Foundation and Practitioner.
Number of questions: 50
Pass mark: 60% (30 out of 50)
Open book: no
Electronic devices permitted: no
AXELOS RESILIA™: Cyber Resilience Best Practice is designed to help commercial and government organizations around the world prevent, detect and correct any impact cyber attacks will have on the information required to do business. Adding RESILIA to the existing AXELOS global best practice portfolio, including ITIL® and PRINCE2®, brings a common cyber resilience best practice for security, IT service management and business. Active cyber resilience is achieved through people, process and technology.
The RESILIA™ Practitioner course starts by revisiting the concepts and knowledge acquired in the Foundation course and requires you to bring that knowledge into practical activities in interesting real-life scenarios. The course begins with distinguishing among the terms: asset, risk, threat and vulnerability. It determines the key activities needed to address risks and opportunities as well as to create and manage a risk register and a risk treatment plan. Further, it explains the purpose and use of the control objectives for cyber resilience processes, and the interactions and activities that are aligned with corresponding ITSM activities. In the final part of the course, it describes the application of the seven-step improvement process to plan cyber resilience improvements, the ITIL CSI approach to cyber resilience and the segregation of duties and dual controls related to cyber resilience roles and responsibilities.
The RESILIA™ Practitioner course audience includes all teams across the Business, IT and Risk functions, including:
Individuals certified at this level will:
In this course, participants are exposed to various scenarios where they can apply their foundation level knowledge and concepts of cyber resilience controls and procedures. This strategy will enable participants to manage and operate effectively in a challenging cyber centric environment. The course takes into consideration the limitations of traditional security controls to combat today’s sophisticated cyber attacks. This proactive approach to design and use new and effective controls along with industry compliance standards would assist in making decisions to prevent, detect, respond, and recover from today’s evolving cyber-threats.
With completing this course, you will be well versed and highly equipped in an organization to govern, manage, and comply with cyber resilience.
RESILIA™ Foundation Certification.
Due to the close relationship between RESILIA and ITIL it is essential that your trainer understands both. All our RESILIA trainers are ITIL Experts as well as RESILIA Practitioners.
Participants receive a copy of the classroom presentation material in the Participant Handbook.
|Day 1||Day 2|
|M1: Course Introduction||Recap and discussion|
|M2: Risk Management||M5: Cyber Resilience Transition|
|M3: Cyber Resilience Strategy||M6: Cyber Resilience Operation|
|M4:Cyber Resilience Design||M7: Cyber Resilience Continual Improvement|
|M8: Segregation of Duties and Dual Controls|
Module 1: Course Introduction
1.1 Let us get to know each other
1.2 Course learning objectives
1.3 Course agenda
1.5 Module end questions
1.6 Course book structure
1.7 RESILIA certification
Module 2: Risk Management
2.1 Distinguish between the terms: risk, asset, vulnerability, threat
2.2 Determine the actions needed to address risks and opportunities and explain their purpose
2.3 Create and manage a:
a) Risk register
b) Risk treatment plan
Module 3: Cyber Resilience Strategy
3.1 Explain the purpose and use of the control objectives:
a) Establish governance
b) Manage stakeholders
c) Identify and categorize stakeholders
d) Create and manage cyber resilience policies
e) Manage audit and compliance
3.2 Explain how ITSM processes and cyber resilience interact
Module 4: Cyber Resilience Design
4.1 Explain the purpose and use of the control objectives:
a) Human resource security
b) System acquisition, development, architecture and design
c) Supplier and 3rd party security
d) Endpoint security
f) Business continuity
4.2 Explain how ITSM processes and cyber resilience interact
Module 5: Cyber Resilience Transition
5.1 Explain the purpose and use of the control objectives:
a) Asset management and configuration management
b) Classification and handling
c) Data transportation and removable media
d) Change management
g) Documentation management
h) Information retention
i) Information disposal
5.2 Explain how ITSM processes and cyber resilience interact
Module 6: Cyber Resilience Operation
6.1 Explain the purpose and use of the control objectives:
a) Access control
b) Network security management
c) Physical security
d) Operations security
e) Incident management
6.2 Explain how ITSM processes and cyber resilience interact
Module 7: Cyber Resilience Continual Improvement
7.1 Explain the purpose and use of the control objectives:
a) Audit and review
b) Control assessment
c) Key Performance Indicators
d) Business continuity improvements
e) Process improvements
f) Remediation and improvement planning
7.2 Apply the seven-step improvement process to plan cyber resilience improvements
7.3 Apply the ITIL CSI approach to cyber resilience
Module 8: Segregation of Duties and Dual Controls
8.1 Apply the concepts of segregation of duties and dual controls to an organizational context