Module 1
Vulnerability Management Programme
Running the lifecycle: asset discovery, scanning, prioritisation, remediation and retest
Ranking by exploitability (EPSS, CISA KEV), asset criticality and threat intelligence
Prioritise a sample scan report and build a 30-day remediation plan.
Module 2
Patch, Configuration and Exposure Management
Managing patch cycles, emergency fixes and CIS secure-configuration baselines
Shrinking the attack surface: shadow IT, exposed services and forgotten domains
Build an attack-surface and patch-status dashboard for a sample organisation.
Module 3
Secure API Design and Authentication
Designing secure APIs: authentication, authorisation and tokens (OAuth 2.0, JWT)
Applying the OWASP API Security Top 10 to mobile, payment and integration APIs
Threat-model a mobile money or payment API and set its security requirements.
Module 4
API Testing, Monitoring and Protection
Testing for broken object-level authorisation, excessive data exposure and injection
Using gateways, rate limiting, WAFs and logging to detect and block API abuse
Test a sample API and rank its most serious security weaknesses.
Module 5
Software Supply-Chain Risk and SBOMs
Tracing attack paths through poisoned dependencies, build pipelines and updates
Using software bills of materials (SBOMs) and dependency scanning to track risk
Generate and read an SBOM for a sample application and flag risky components.
Module 6
Third-Party and Vendor Cyber Risk
Assessing the cyber posture of vendors, cloud providers and managed service partners
Writing security, audit and breach-notice clauses into contracts, SLAs and tenders
Draft a third-party cyber-risk assessment checklist.
Module 7
AI-Enabled Fraud and Social Engineering
How attackers use AI for phishing, business email compromise and SIM-swap fraud
Spotting the red flags of AI-generated fraud in payments and customer channels
Analyse an AI-enabled payment fraud case and map the control gaps.
Module 8
Deepfake Detection and Defence
Understanding deepfake audio, video and identity-spoofing techniques and their impact
Call-back, code-word and dual-approval controls that protect staff and executives
Design a deepfake-proof payment verification protocol for your finance team.
Module 9
AI-Powered Threat Detection and Response
Using AI and machine learning for anomaly detection, alert triage and threat hunting
Knowing the limits, bias and false-positive risks of AI-driven security tools
Triage AI-flagged alerts from a sample SIEM log dataset in a live SOC lab.
Module 10
Incident Response Planning and Execution
Building the response plan: roles, playbooks, escalation and crisis communication
Containment, eradication, recovery and evidence preservation for investigators
Run a full tabletop on a ransomware attack against a Kenyan institution.
Module 11
Post-Incident Review, Resilience and Regulatory Reporting
Running lessons-learned reviews and feeding fixes back into controls
Meeting the ODPC 72-hour breach notification and sector regulator reporting duties
Draft an incident report and an ODPC breach notification.
Module 12
Executive Cyber-Risk Reporting and Governance
Translating technical exposure into business risk, shilling impact and board metrics
Setting cyber-risk appetite, KRIs and dashboards for boards and audit committees
Present a one-page board cyber-risk report and your personal resilience action plan.