Professional training in London and 13 international cities info@llmi.uk

IT Management and Cyber Security · IMCS-011

Cybersecurity Risk Management with the NIST CSF 2.0

The NIST Cybersecurity Framework is one of the most widely used approaches for managing cyber risk, and version 2.0 adds a dedicated Govern function and broader…

  • Duration5 days
  • Next date16 - 20 Nov 2026
  • Cities6 cities
  • Fee from£3,250
Cybersecurity Risk Management with the NIST CSF 2.0

Course overview

Why Attend

The NIST Cybersecurity Framework is one of the most widely used approaches for managing cyber risk, and version 2.0 adds a dedicated Govern function and broader applicability to organisations of all sizes and sectors.

This LLMI course explains the CSF 2.0 structure, functions, categories and profiles, and shows how to assess current cybersecurity posture, define target profiles, prioritise gaps, integrate cyber risk with enterprise risk management and report to leadership. Participants build current and target profiles for a case organisation.

The course bridges technical security controls and business risk decisions.

Course Objectives

Explain the structure and purpose of NIST CSF 2.0

Apply the Govern, Identify, Protect, Detect, Respond and Recover functions

Assess current cybersecurity posture

Define target profiles and prioritise gaps

Integrate cyber risk with enterprise risk management

Report cyber risk to executives and boards

Target Audience

Information security managers

IT and risk managers

Compliance professionals

Internal auditors

CISOs and security architects

Consultants

Course Methodology

Framework walkthroughs

Profile-building workshops

Case studies

Risk discussions

Reporting exercises

Course outline

  1. 1Day 1: Cyber Risk and CSF 2.0
    • Cyber threat landscape
    • Cyber risk concepts
    • CSF 2.0 overview
    • Changes from earlier versions
    • Mapping to other standards
    • Exercise: Framework orientation
  2. 2Day 2: Govern and Identify
    • Cybersecurity governance
    • Roles and policy
    • Supply chain risk
    • Asset management
    • Risk assessment
    • Workshop: Governance assessment
  3. 3Day 3: Protect and Detect
    • Identity and access
    • Data security
    • Platform security
    • Monitoring
    • Detection processes
    • Exercise: Control gap review
  4. 4Day 4: Respond and Recover
    • Incident response
    • Communication
    • Recovery planning
    • Improvements
    • Testing
    • Case study: Ransomware response
  5. 5Day 5: Profiles and Reporting
    • Current and target profiles
    • Gap prioritisation
    • Roadmaps
    • Metrics
    • Board reporting
    • Capstone: CSF improvement roadmap

Dates and fees

16NOV 16 - 20 Nov 20265 days AmsterdamNetherlands £4,250+ VAT Register
14JUN 14 - 18 Jun 20275 days AmsterdamNetherlands £4,250+ VAT Register

Related

More IT Management and Cyber Security courses

View all

Training a team?

Any course in our catalogue can be delivered privately for your organisation, at your offices or in one of our cities, with content shaped around your goals.