Learn to govern an information security program: set policies, run an ISMS, assess and treat risk, and report security performance to senior management with meaningful metrics.
The Information Security Management course in Doha, Qatar is designed for professionals who need to lead security as a business function rather than a purely technical one. It covers security governance, roles and accountability, policy frameworks, the information security management system (ISMS) concept, risk assessment and treatment, and the metrics that show whether controls are working. Learners see how frameworks such as ISO/IEC 27001 and the NIST Cybersecurity Framework 2.0 help organize a program and align it with business objectives.
Teaching is practical and discussion-based. Participants draft a policy hierarchy, build a simple risk register, map controls to identified risks, and design a security dashboard for an executive audience. Case studies drawn from incidents in finance, energy and the public sector show how governance gaps lead to breaches and how strong management reduces them. The course can also run as an in-house program for organizations that want to use their own policies, risk appetite statements and reporting needs as working material.
By the end of this course, participants will be able to:
Explain the components of information security governance and the roles of board, management and staff
Design a policy framework covering policies, standards, procedures and guidelines
Describe how an ISMS is scoped, operated, monitored and continually improved
Conduct an information security risk assessment and select appropriate treatment options
Define key performance and risk indicators for reporting security posture to leadership
Coordinate security awareness, third-party risk and incident management within one program
This course suits professionals who manage, oversee or are moving into responsibility for an organization's information security program.
Information security managers and officers
IT managers taking on security governance duties
Risk, compliance and internal control professionals
Aspiring CISOs and security team leads
Business continuity and operational resilience managers
Confidentiality, integrity and availability as business requirements
Governance roles: board, CISO, risk owners and asset owners
Aligning security strategy with business objectives and risk appetite
Overview of ISO/IEC 27001 and NIST CSF 2.0 functions
Building a policy hierarchy and document control process
Acceptable use, access control and data classification policies
Policy exceptions, approvals and periodic review
Communicating policies and measuring staff awareness
Defining ISMS scope, context and interested parties
The Plan-Do-Check-Act cycle in day-to-day security management
Internal audit, management review and corrective action
Integrating the ISMS with other management systems
Asset identification, threats, vulnerabilities and impact
Qualitative and semi-quantitative risk scoring methods
Risk treatment: modify, retain, avoid or share
Maintaining a risk register and risk treatment plan
Third-party and supply chain security risk
Key performance indicators versus key risk indicators
Designing an executive security dashboard
Reporting incidents, trends and control effectiveness
Presenting security investment cases to senior management
Qatar's government entities, banks, energy producers and healthcare providers increasingly run critical services on digital platforms, which makes structured security management a leadership responsibility. National cybersecurity guidance from Qatar's National Cyber Security Agency encourages organizations to adopt sound governance, risk management and policy practices. Professionals who can turn these expectations into a working program support the secure digital economy envisioned in Qatar National Vision 2030 and help their organizations protect information that customers and citizens entrust to them.
Join a scheduled class at our training center in Doha or attend live online. For organizations, the course can run as an in-house program at your premises or online, tailored to your sector, examples and schedule.
It is a course in Doha, Qatar that teaches how to run information security as a managed program, covering governance, policies, the ISMS, risk assessment and treatment, and the metrics used to report security performance to senior leadership.
It suits information security managers, IT managers with security responsibilities, risk and compliance professionals, and team leads preparing for senior security roles who need a structured view of how a security program is governed and measured.
No. The focus is management and governance rather than configuring tools. Participants work on policies, risk registers, control mapping and dashboards. A general understanding of IT systems helps, but deep technical skills are not required.
Yes. It can be delivered at your premises or online and tailored to your sector, examples and schedule, for instance by working with your own policy set and risk register. Contact Leaders Training Center to plan an in-house session.
Tell us a little about yourself and an advisor will contact you about batch timings, fees and eligibility. No obligation.
Sat–Thu: 09:00–22:00Fri: 08:00–22:00
Build a solid technical grounding in cybersecurity: core security principles, common threats, network and endpoint defenses, identity controls and the frameworks IT teams use to manage risk.
Learn how attackers find and exploit weaknesses, and practice reconnaissance, scanning, enumeration and basic exploitation in an isolated lab, always within legal authorization and an agreed scope.
Learn to plan, run and report a structured penetration test, from scoping and rules of engagement through network, web and Active Directory testing in a lab to risk-rated findings.
Prepare for the CompTIA Security+ exam by working through its domains, from threats and security architecture to operations and governance, with labs, scenario questions and practice reviews.
