We design two training tracks: executive workshops that empower leadership to make informed security and regulatory decisions (SAMA, NCA, and risk management), and advanced hands-on technical training for security teams in incident response, penetration testing, and threat analysis.
What's included
- Two distinct tracks: a boardroom and C-suite track for governance and decision-making, and an advanced hands-on track for security, IT, and development teams.
- Executive track: cyber-risk governance, regulatory accountability under SAMA and NCA, budget and risk-appetite decisions, and reading security posture without needing to be technical.
- Executive crisis simulation: a facilitated tabletop of a realistic breach or ransomware scenario that rehearses decision-making, communications, and regulatory-notification duties.
- Technical track: hands-on labs in incident response and digital forensics, threat hunting and SOC operations, secure coding, and practical penetration testing.
- Curriculum tailored to your actual technology stack, sector threats, and team maturity, delivered on-site or remotely by practitioners rather than slideware trainers.
- Optional pre- and post-training skills assessment to measure capability uplift and inform certification pathways such as SANS/GIAC, OSCP, or CISSP.
Methodology & standards
1. Training needs analysis: assess each audience's current maturity, roles, and regulatory drivers to define learning objectives per track.
2. Curriculum design: build executive and technical syllabi tailored to your sector and stack, mapped to NCA ECC and SAMA training expectations.
3. Delivery: interactive executive workshops and facilitated tabletops, plus hands-on technical labs in a safe cyber-range environment.
4. Assessment: pre- and post-training evaluation, lab challenges, and a scenario debrief to confirm capability uplift.
5. Roadmap: a per-role development and certification pathway so learning continues after the engagement.
Deliverables
- Tailored curriculum and syllabus for each track, agreed before delivery.
- Executive briefing materials and a board-ready summary of cyber risk and regulatory duties.
- Facilitated tabletop scenario pack and a written after-action report with recommendations.
- Hands-on lab environment, exercises, and reference materials for the technical cohort.
- Pre- and post-training assessment results quantifying capability uplift per participant.
- Certificates of completion and a per-role certification and development roadmap.
Regulatory controls it satisfies
Typical timeline
Executive workshops and tabletops typically run half a day to two days; technical tracks run one to five days per module, scheduled around your teams and delivered on-site or remotely.
Common questions
Can training be tailored to our sector and systems?
Yes. We build the curriculum around your actual technology stack, threat profile, and regulatory obligations rather than delivering a generic course, so the exercises reflect your real environment.
Are the trainers practitioners?
Yes. Sessions are led by active consultants who perform assessments, incident response, and vCISO work, so participants learn from current field experience, not theory alone.
From the same practice