PROFICIENCY DIPLOMA IN COMPUTERIZED SECURITY POLICIES AND PROCEDURES
Course Duration: 4 to 6 months (16 to 24 weeks)
Course Fee: 30,000 Kenyan Shillings
Weekly Commitment: Minimum of 2 hours per day
Course Overview:
This diploma course focuses on the development, implementation, and management of security policies and procedures to protect organizational assets, information, and ict systems from security threats.
Semester 1: Fundamentals of Security Policies and Procedures
Week 1-2: Introduction to Security Policies and Procedures
- Overview of computerized Security Policies
- Definition and Importance
- Types of Security Policies (Information Security, Network Security, Physical Security)
- Policy Frameworks and Standards (ISO/IEC 27001, NIST)
- Understanding Security Threats
- Common Security Threats and Vulnerabilities
- Risk Assessment and Management
- Practical Exercises
- Analyzing Existing Security Policies
Week 3-4: Developing Security Policies
- Policy Creation Process
- Identifying Requirements and Objectives
- Drafting Effective Security Policies
- Policy Approval and Communication
- Components of a Security Policy
- Policy Statement
- Scope and Applicability
- Roles and Responsibilities
- Enforcement and Compliance
- Practical Exercises
- Drafting Security Policies for Various Scenarios
Week 5-6: Implementing Security Procedures
- Procedure Development
- Translating Policies into Procedures
- Procedure Documentation and Dissemination
- Implementation Strategies
- Training and Awareness Programs
- Integrating Procedures into Daily Operations
- Compliance and Monitoring
- Ensuring Adherence to Policies
- Monitoring and Auditing Procedures
- Practical Exercises
- Developing and Implementing Procedures
Week 7-8: Managing Security Policies and Procedures
- Policy Review and Updates
- Regular Review and Revision of Policies
- Handling Policy Exceptions and Changes
- Incident Response and Management
- Developing Incident Response Procedures
- Handling Security Incidents and Breaches
- Continuous Improvement
- Assessing Policy Effectiveness
- Implementing Feedback and Lessons Learned
- Practical Exercises
- Creating Incident Response Plans and Update Procedures
Semester 2: Advanced Topics and Capstone Project
Week 9-12: Advanced Security Policy Topics
- Legal and Regulatory Requirements
- Understanding Legal Obligations (Data Protection Laws, Industry Regulations)
- Compliance with Regulatory Standards
- Integration with IT Governance
- Aligning Security Policies with IT Governance Frameworks
- Risk Management and Business Continuity Planning
- Emerging Threats and Trends
- Adapting Policies to New Security Threats
- Emerging Trends in Security (Cloud Security, IoT Security)
- Practical Exercises
- Reviewing and Updating Policies Based on New Threats
Week 13-16: Capstone Project and Final Assessment
- Capstone Project
- Developing a Comprehensive Security Policy Framework for a Simulated or Real Organization
- Implementing Procedures and Training Programs
- Documenting Policy Development and Implementation Processes
- Course Review and Preparation
- Comprehensive Review of Key Concepts
- Practice Projects and Revision
- Final Exam
- Written and Practical Assessments
Certification
Upon successful completion of the course, students will receive a "Proficiency Diploma in Security Policies and Procedures," demonstrating their expertise in creating, implementing, and managing security policies and procedures. This qualification prepares them for roles in security management, compliance, and IT governance.