Courses Security for Leaders

Security for Leaders

Decisions without expertise. For technical managers who inherited security without asking for it.

Decisions Without Expertise.

A decision-grade course for technical managers who inherited security — CTOs, engineering managers, tech leads, first-time security leaders. No "what is a firewall." Just the judgment calls experience would otherwise give you.

Every Act 3 module is anchored in real incidents — Colonial Pipeline, MGM vs. Caesars, Samsung ChatGPT, Equifax, Target 2013, Twitter 2020 — and ends with a branching decision scenario where your earlier choices gate what happens next.

"You don't need to become a security practitioner. You need the judgment to make calls that hold up — on vendors, incidents, AI, risk, hiring, and the people you rely on."

What You'll Learn

  • Act 1 — Anatomy — the six pillars of a program and a NIST CSF crosswalk you can actually use
  • Act 2 — Making the case — translating security into business language without becoming a fraud
  • Act 3 — Maturing — vendor evaluation, incident decision-making, AI governance, risk prioritization, your first hire, awareness that isn't theater

Course Curriculum

1

What a Security Program Actually Is

60 min 8 lessons Anatomy
Module Overview 2 min The Six Pillars 8 min People 8 min Devices 8 min Data 8 min Systems 8 min Vendors 8 min Incidents 8 min NIST CSF Crosswalk 6 min
2

Assessing Where You Are

45 min 3 lessons + scenario Anatomy
Module Overview 2 min The 48-hour Audit 10 min Questions That Reveal Maturity 8 min Metrics Worth Tracking 8 min Scenario: You Just Took the Job 15 min
3

Translating Security Into Business Language

55 min 4 lessons + scenario Making the case
Module Overview 2 min Why Security Feels Like a Cost Center 8 min The Three Audiences 10 min Budget Asks That Land 8 min Reporting Incidents Up 8 min Scenario: The Board Meeting 12 min

Act 3 — Maturing the Program

~5 hours 6 modules + templates Coming soon

Vendor evaluation, incident decision-making, AI governance, risk prioritization, your first security hire, awareness that isn't theater. Each module includes a state-driven decision scenario and a downloadable template.