Autoplay
Autocomplete
Previous Lesson
Complete and Continue
SME TRACK - FROM ZERO TO CYBERSECURITY CERTIFICATION
Before you start:
Cybersecurity Mindset (1:54)
Holistic Cybersecurity Strategy (2:20)
Project Lead Duties (2:49)
Course & Project Structure:
12+ Weeks of Learning and Implemetation
Always latest Information for you!
📺Learning Snacks
Data Minimisation
Service Form
My Budget Recommendations:
Don't make these Cybersecurity Budget Mistakes! (2:38)
Why Cybersecurity Certification? (3:05)
Save Money first! (0:08)
Build and buy along your Business Strategy (1:23)
Find Partners for your Budget. (0:47)
Selling Cybersecurity! [+ Upsell Ideas] (1:35)
1. Shifting Attack Scenarios
How do Hackers look like? (2:55)
Assets at Risk (1:16)
From Computer Virus to AI Fraud (2:13)
Work Process Attacks (1:55)
AI Attacks (0:47)
Attacks against Key Player (3:15)
Identity Theft (2:06)
AI Deepfakes (1:44)
Reputation Damages (1:23)
📺Cybersecurity Basics for the Age of AI
watch & share
2. Technical and operational Quick Fixes
Updates (0:54)
Cancellations (2:05)
3 Work Process Changes [incl. 2FA] (2:26)
Feedback (1:08)
Backup Strategy (1:08)
Employee Lifecycle (1:22)
Penalties (1:52)
(Known) Cybersecurity Gaps vs. AI!?
Checklist: Quick Fixes
📺The Panic around Anthropic's Cybersecurity AI Model
watch & share
Note: AI in Cybersecurity and Risk Management
Fraud Alarm! AI used the wrong way. (1:35)
Where AI helps in Cybersecurity (2:39)
How to ask AI for IT Support (0:57)
📺 How to: Successful AI Projects
watch & share
[Live Q&A Calls]
Prepare your first Live Call for the Best Experience:
Every second Thursday - 14.00 CET (Berlin Timezone)
Additional 1:1 Calls with Carolin
Insights: Cyber Insurance
Limiting Costs, not limiting Liability! (3:51)
Company-Insurance-Fit (0:58)
3. Legal Requirements
No Legal Advice! But Guidance. (1:40)
Regulatory Patterns (2:44)
Data Protection (2:30)
Cybersecurity (2:18)
Business Continuity (1:20)
Artificial Intelligence (0:50)
Industry Requirements (0:40)
Controlling Supply Chains (1:22)
Reporting Timelines (3:08)
Regulator's Platforms
Checklist: Legal Meeting Prep
4. People Skills
...and one more week to achieve 3 milestones!
Mastering Conflicts (1:29)
Be pro-active! (1:17)
Lobbying (1:31)
Brutal Honesty (2:14)
Structure & Self-organisation (0:57)
Time Management (2:39)
Boundaries (2:39)
How to ask different Experts (2:06)
1st Double Check
Evaluate your Project Status!
Cybersecurity Status Checks
Be precise! (2:09)
Avoid Misunderstandings: (1:39)
You better know nothing. (1:19)
Asking "stupid" questions the right way... (3:05)
5. PROJECT MANAGEMENT SETUP & TEMPLATES
Just for better overview - don't stress!
How to set up your work environment for success: (6:46)
Document Folder, Cybersecurity Inbox, Support Flows
Checklist: Quick Fixes [Chapter 2]
Checklist: Legal Meeting Prep [Chapter 3]
PROJECT OVERVIEW TEMPLATE
Training Plan Template [Chapter 6]
Cybersecurity Frameworks & Vendor Management Templates [Chapter 7 & 12]
Cybersecurity Project Planning Template [Chapter 8]
IT Infrastructure Overview Tutorial [Chapter 9]
Worst Case Plan Template [Chapter 10]
Policies [Chapter 11]
6. Effective Cybersecurity Training
Mandatory Training (0:46)
Roles & Responsibilities -> Training (1:22)
Lunch & Learn Sessions (1:12)
Cybersecurity Ambassadors (1:06)
Rely on different Experts (0:42)
📺Cybersecurity Basics for the Age of AI
watch & share
📺 How to check an AI Tool before using it
watch & share
📺Recommended Cybersecurity Documentaries
Financial Times Video on Chinese Hacker Farms
Mastercard Series "Anatomy of a Scam"
More videos on my YouTube channel:
Talk to your Clients!
1st round - The Friendly Partner
7. How to chose the right Cybersecurity Framework
Important Metrics
Focus: CyberTrust
Focus: ISO27001
Focus: SOC2
Other Cybersecurity Certifications
Specific Industry Certifications
Management Decision needed!
Find the right Partners
IT Support
System Setup & Maintenance
Cybersecurity Solution Partners
Security Operations Center
Legal Support
Regular Training
Threat Insights
Cyber Insurance & Assistance
Crisis Communication
📺DevSecOps - Cybersecurity in Software Development
watch & share
📺Cybersecurity Partner Management
watch & share
📺Physical Security
watch & share
8. Long-term Project Planning
Connecting the Dots
Keeping an Overview
Double Check with the Framework (again, and again, and again)
Meetings & Mails
Org Performance
Motivation for repeating Tasks
Project Partners
Timeline and Milestones
Change Management
Communication and Documentation
ISMS Setup
My Take on ISMS/ Compliance Tools
Better done than perfect!
Basic Tools
Special Tools
Data Exchange
9. IT Infrastructure Overview
Framework
Workplace
Infrastructure
Development
Product
Client Solutions
Website/s & Social Media
📺Identity and Access Management
watch & share
📺 Software Bill of Materials (SBOM)
watch & share
📺 Bug Bounty Programs
watch & share
2nd Double Check
Evaluate your Project Status!
10. Worst Case Plan
Short and printable!
Key People
Phone Numbers
Service Level Agreements
Test it!
Quality of Process Descriptions
Question - Answer - Evidence
Sensitive Information vs. makes sense Information
Easy to understand, please!
Reading a Cybersecurity Certificate
📺 Business Continuity
watch & share
11. Policies
Templates
Industry Add-ons
Customization
3rd Double Check
Evaluate your Project Status!
1st Assessment for Certification Preparation
Preparing the Framework
Asking "stupid" Questions
Taking Notes: Facts, not Feelings!
12. Vendor Management
The Supply Chain Logic
As Client
As Data Processor
As IT Vendor
Ask the critical Questions!
📺My Vendor Check Tips
watch & share
Onboarding/ Change of IT Vendors
Tender Process (?)
Cybersecurity Assessment
Contract Negotiations
Onboarding Project
Data Migration
Cooperation with Core IT Infrastructure Providers
(External) Pentests
13. Assessment for Certification Preparation
Double checking your Project Documentation
Status Updates
Filling Last Gaps
Internal Audit
Internal or external Auditor?
Blocking Time
Inviting Key People
Taking Notes
Management Review
Translating Cybersecurity Measures into Management Expectations
Clear words, yet prepared.
Return on Invest
External/ Certification Audit
Finding the right Auditor
Organisation of Audit Days
Moderation of Audit Days
PLUS Get visible as Trusted Partner
Security Signals
Procurement Lingo
Client Communication
Talk to your Clients!
2nd round - The Big Fish
PLUS Cybersecurity for Business Development
Upsell: needs of remaining clients
Reaching new leads outside your bubble!
New business: security instead of industry focus
PLUS Contact to Stakeholders and Regulators
Business Associations
Expert Groups
Regulators
Linkedin Challenge:
Photo Post
De-briefing
Learning from you Project Documentation
Executive Summary and Recommendations
Update Meetings
Regular Tasks
Documentation
Preparing 2nd Year of Certification
Project Update
Every second Thursday - 14.00 CET (Berlin Timezone)
Lesson content locked
If you're already enrolled,
you'll need to login
.
Enroll in Course to Unlock