Cybersecurity and Information Systems Protection: ISMS management for companies

Course overview

Description generated based on course syllabus and open data.

Online program on cybersecurity and information systems protection for managerial roles. Lecturer: Maksym Shapoval, Head of Information Security and Business Continuity at Uklon, 13+ years of experience, ISMS implementation under ISO 27001, business continuity under ISO 22301, GDPR practices, pentests and audits. Duration: 20 lectures over 2.5 months, sessions on Mondays and Thursdays.

Who benefits from cybersecurity and information systems protection

• Product owners and managers responsible for risk, compliance, and business continuity.
• IT managers, system administrators, and DevOps integrating security into infrastructure.
• Information security specialists building ISMS and access management processes.
• Compliance, risk managers, and auditors working with ISO 27001, ISO 22301, and GDPR.

Who this cybersecurity course is not designed for

• Those seeking purely technical offensive training or narrow tool-centric labs.
• Those needing basic IT literacy without a security management context.

Cyber defense challenges → expected outcomes of program engagement

• Fragmented policies and controls → coherent ISMS model and support lifecycle.
• Unclear risks → assessment methods, prioritization, and action planning.
• Opaque ISO 27001, ISO 22301, GDPR requirements → control mapping and checklists.
• Scattered access → Access Management processes and privilege governance.
• Exposed infrastructure → baseline patterns for network and endpoint protection.
• Incidents without procedures → roles, response playbooks, and communications.
• Development without security → secure SDLC integration and supplier requirements.

Comparison with alternatives in cybersecurity and information systems protection

• Self-study via articles and videos: fragmented knowledge; this program structures ISMS requirements and support processes.
• Narrow technical courses: deep tools; here the focus is on management, risk, compliance, and control integration.
• General management programs: cover business processes; this one focuses on information security, cyber defense, and ISMS.

Program coverage and learning results in cybersecurity and ISMS

Cybersecurity fundamentals and ISMS

• Information security principles: confidentiality, integrity, availability.
• ISMS structure, policies, roles, metrics, continual improvement.

Risk assessment and regulatory compliance

• Risk management methods, risk register, control selection.
• ISO 27001, ISO 22301, GDPR: requirements, artifacts, audit preparation.

Access Management and infrastructure security

• Identity and access management, least privilege, segmentation.
• Perimeter and cloud security, endpoint protection, vulnerabilities and pentests.

Secure development and incident handling

• Secure SDLC, supplier security requirements, static and dynamic analysis.
• Detection, response, and recovery processes, communications and reporting.

The format systematizes approaches to protecting information systems and includes practical examples from the lecturer's experience.