Session Objective:
The Security Auditing and Cyber Essentials session is designed to provide participants with an understanding of the key concepts and best practices related to security auditing and compliance with the Cyber Essentials scheme. Participants will learn how to identify security vulnerabilities, assess risks, and implement security controls that help protect against cyber threats. The session will also explore strategies for promoting awareness and engagement around cybersecurity in the workplace.

Session Outline:
Introduction to cybersecurity and the importance of security auditing
Overview of the Cyber Essentials scheme and its requirements
Understanding common cyber threats and vulnerabilities
Conducting a security audit: key steps and best practices
Identifying risks and developing risk management strategies
Implementing security controls and best practices
Promoting cybersecurity awareness and engagement in the workplace
Review and assessment of session objectives and outcomes

Delivery Format:
This session can be delivered online or in-person, depending on the preferences and availability of participants. The session will include a mix of lectures, interactive activities, group discussions, and case studies to facilitate learning and engagement.

Session Duration:
The session can be customized to fit the needs and preferences of participants but typically lasts between 2-4 hours.

Learning Outcomes:
By the end of this session, participants will be able to:
Understand the importance of cybersecurity and the role of security auditing in protecting against cyber threats.
Identify the key requirements of the Cyber Essentials scheme and develop strategies for compliance.
Identify common cyber threats and vulnerabilities and assess risks to their organization.
Conduct a security audit using best practices and develop a risk management plan.
Implement security controls and best practices that are tailored to their organization’s needs and resources.
Promote cybersecurity awareness and engagement in the workplace through effective communication and training.

Assessment:
Participants’ learning outcomes will be assessed through interactive activities, group discussions, and case studies. Participants will also have the opportunity to apply their learning to their own organisation and develop a risk management plan that addresses their specific needs and resources.