QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Designing Vantage Freight's security organisation as it scales from 6 to 25 people, around the operating model loop of mandate, structure, roles, sourcing, interfaces, decision rights, capacity and evolve. At the centre, the head of security leads GRC, SecOps, AppSec and IAM teams with an MSSP for round-the-clock monitoring and engineers embedded in product teams. On the left, the misfits of a six-person team: unclear ownership of cloud reviews, a critical vulnerability left for six weeks, a single IAM expert, an incident unseen for eleven hours and a headcount request with no data. On the right, a decision-rights matrix naming who decides risk acceptance, architecture changes, routine requests, production isolation and exceptions.
CY-SENIOR-039Senior Level · Security Operating Model

Security Operating Model & Organisation Design — The Operating Model Loop

A senior-level course that designs the security organisation itself. Work the operating model loop - eight arcs a head of security must get right: Mandate, Structure, Roles, Sourcing, Interfaces, Decision Rights, Capacity, and Evolve - chartering the mandate, choosing the structure, building the role catalogue, deciding the sourcing mix, defining the interfaces, assigning decision rights, planning capacity against risk, and evolving the model as the company scales. Four hands-on activities in every lesson, built from real operating-model artifacts, not shell commands.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Charter a security function with a clear mandate, scope boundaries, and a deliberately chosen reporting line.
  • Build a role catalogue and cross-org RACI with no hero dependencies and real career paths.
  • Decide what to build in-house, buy, or partner, while keeping accountability and decisions in-house.
  • Assign explicit decision rights for risk, exceptions, architecture, and spend, matched to stakes and reversibility.

Price:৳10,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.