Security Exception Governance

A forty-hour Pro-level policy-exception governance simulation run on a live exception governance investment board, where you are Head of Security Policy and Standards at a retail, commercial and trade-finance bank; phished credentials open a portal excepted from the MFA standard since 2019 and renewed seven times behind a compensating control nobody tested, and the Audit Committee asks how much risk 1,940 exceptions carry and what it would cost to retire them versus govern them — and you count honestly, test the controls, fix authority and renewal, price the risk, rank remediation, revise unachievable standards, automate the regime, rebuild committee reporting and defend an investment case to the Board.

What you'll learn

• Measure an exception estate honestly — reconciled population, lapses, tested compensating controls, authority and renewal — and contain the most dangerous exceptions without stopping the business.
• Govern exceptions by design — compensating-control assurance, an authority matrix, escalating renewal with a maximum life, revised standards and a workflow of hard stops and tags.
• Quantify risk carried in exceptions in calibrated pounds, set an appetite with hard limits, and rank remediation by risk removed per pound.
• Report exceptions to committees through KRIs and the named tail, decide investment at the margin, name residuals for Board acceptance and win a resolution the Board can be held to.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.