Designing who may decide what about security across Halverstone Group's nine operating companies, shared services and joint ventures: the decision rights board of eight tiles — inventory, authority, assurance gates, risk acceptance, escalation, evidence, federated models and assurance of the system itself; an illustrative delegation of authority matrix showing who is accountable, responsible, consulted or informed for accepting high risk, gating architecture and granting time-boxed exceptions; and the audit finding that no one could say who approved a risky architecture, answered by a decision record naming the accountable approver, the signed secure-by-design attestation, the time-boxed exception and the minuted vote, so the regulator's request for evidence can be met.

CY-EXPERT-007Expert Level · Governance

Security Decision Rights — The Decision Rights Board

An expert-level course in architecture assurance for decision rights: designing, evidencing, and assuring who may decide what about security - policy, architecture, risk acceptance, and exceptions - across a federated enterprise. Work the decision rights board - eight tiles from naming decisions through assuring the governance system itself - closing the exact gap behind an audit finding that no one could say who approved a risky architecture. Four hands-on activities in every lesson, and no shell terminals: every drill produces a governance artifact.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Build a shared decision taxonomy with criticality tiers and a defined lifecycle across a federated enterprise.
Write a delegation of authority matrix that names accountable roles and charters committees on the three lines model.
Design binding architecture assurance gates with explicit criteria, attestations, and required sign-off.
Produce reconstructable decision evidence and run maturity assessment, sampling, KPIs, and honest board reporting.

Price:৳12,000