Information technology today is a critical business enabler and as such should be viewed from the top management perspective instead of an IT department perspective.

This necessitates the top management becoming Information Risk Management aware, to enable due diligence on decisions that may affect safeguarding critical information assets within the enterprise. The need is becoming more important in view of regulatory and compliance requirements that shift the onus of safeguarding information squarely on the Board and the top management.

CII has outlined the following courses covering major areas affecting IT Security Governance and implementation of enterprise-wide security programs.