1. Cybersecurity and Information Security Education
Mapping and building
an education body of knowledge
Georges ATAYA
November 22, 2018
Mapping and building
an education body of knowledge

2. Cybersecurity and Information Security Education
Mapping and building an education
body of knowledge
Georges ATAYA
November 22, 2018

3. 3
Two Executive Masters and Ten Executive ProgramsBased on a common module portfolio
Executive Master in IT Management (ITME)
Executive Programme in
. CIO Practices
. CIO Leadership
. IT Business Agility
. Enterprise and IT Architecture
. IT Sourcing
. IT Management Consulting
Executive Master in Information
Security (ISME)
Executive Programme in
. Security Governance
. Information Security
. Cybersecurity

4. Executive Education in IT and in information
Security Management
Founded by Georges Ataya in 2001 as a postgraduate education
at Institute d’Administration et de gestion at Université Catholique
de Louvain, the first offering was called « Master in IT Auditing ».
Directed by Prof. Yves de Rongé.t
2001 Foundation
2003 - 2005 Three University involvement
From 2003 to 2005, the education was steered by
respresentatives from UCL represented by prof. Benoît
Macq, VUB represented by professor Dirk Van Dijk and
Solvay Brussels School represented by Bruno Colmant and
directed by Georges Ataya.
Annual Report Georges ATAYA
2005 Solvay Business School
In 2005, UCL and VUB involvement was reduced to simple
participation of senior professors in lecturing at the education as it
was operated by Solvay Brussels school in line with an agreement
signed with Professor Ataya.

5. “Master in IT Audit”
At UCL/iag/ESPO
2001
2005 - 2012
2003
2009
2015
“Postgraduate in IT Audit and
Security”
“Executive Master in IT Management”
Executive Master and Executive
Program in IT Governance were
delivered in Brussels and in Dubai
(UAE).
Four major transformation were overall conducted:
Annual Report Georges ATAYA
”Executive Master in IT Management”
and “Executive Master in Information
Security” as well as ten derived
Executive programs.

6. Participants profile
Based on recent year participant profiles
International Participants' nationalities (2011-2016)
SPAIN ITALY POLAND France IRLAND ROMANIA
Portugal UK BULGARIA RUSSIA ALBANIA UKRAINE
SLOVAKIA HUNGARIA Luxembourg NORWAY GERMANY NL
ETHIOPIA NIGERIA MOROCCO CAMEROON RWANDA SENEGAL
TUNISIA EGYPT MAROCCAN Beninese VENEZUELA MEXICO
USA BRAZIL Trinidadian PARAGUAY SAUDI ARABIA JORDAN
TURKEY INDIA
Industry (2011-2016)
IT services
Consulting
Public Services
Banking
/Insurance
Pharmaceutical/Chem
ical
Manufacturing
Services
Telecom
Others

7. Ten combined Research projects
Security-drive engineering of
Cloud-based Applica8ons research
over three years ending end 2018
iCite involvement
Managed by professor Ataya with the
full time involvement of Nicolas
Ameye.
Full time researcher
Risk register for the ten domains to
be developed by our team.
SECLOUD research
Funded by INNOVIRIS

8. SECURE APPLICATION DEVELOPMENT
Brussels then Leuven
Co-founded, with Johan
Peeters, the World-exclusive
Secure Application Development
week running since 2005.
Speaks on Application security.
International keynote speakers.

9. Professional Education and Certification
Delivered through professional organizations
PECB Europe
Certification and education
Courses are based on the PECB
Internationally reputed portfolio,
leading to certification in various
domains such as ISO27001
CyberSecurity bnexus
Certification and education
Courses are based on the ISACA CSX
portfolio leading to Fundamentals and
Practitioner certification
Belgian CyberSecurity Centre
ICT Control frame agreement
ICT Control professional and academic
experts have built the body of knowledge
for three domains including Forensics,
Data Security and Physical Security. They
ware lectured to public servants from
various federal services.
Education Catalog by ICT Control
Complementary education catalogue
ICT Control developed an offering with various
education courses available through Solvay
Brussels School in the forms of Customer
Specific programs.

10. Executive Master education
In Information and Cyber Security

11. © 2014 ictc.eu
WednesdayThursday MondayTuesday Monday

12. © 2014 ictc.eu
WednesdayThursday Tuesday
Monday
Executive Master in Information
Security (ISME)
Executive Programme in
. Security Governance
. Information Security
. Cybersecurity

13. VARIOUS FRAMEWORKS, BODIES OF KNOWLEDGE
AND STANDARDS
Copyright ictc.eu
ISO 27001

14. G3 – IT Risk and
Legal concerns
G1 – The CIO
Foundation
G2 – IT Governance
Workshop
B2 – Business
Transformation
B3 – Digital Agility
and Innovation
B1 – Enterprise
Strategy and
Architecture
M3 – IT Sourcing
Management
G – track
IT Governance
M – track
IT Management
B – track
Business Agility
Support to professional certifications
A1 – IT Finance and
Portfolio
Management
A2 – Soft Skills for IT
professionals
A3 – Building Expert
Opinion
A – track
Activating skills
Dear Prof. Georges Ataya,
I was informed by ISACA couple of days ago that I am the world topper for
CGEIT of June 2011, as in the attached email.
Undoubtedly, one of the key enablers for my success were the boot camp
days with you. I would like to express my heartfelt gratitude to you for
your invaluable teaching and guidance provided during this course.
Again, I thank you for the wonderful course conducted by you for the
CGEIT Boot Camp in Dubai, during May 2011.
Regards,
Binto Kurien, IT Governance and Project Management Office
at a Bank in Abu Dhabi
© 2014 ictc.eu
M1 – IT Service and
Run Management
M2 – Applications
Build and
Management
S1 – Information
Security
Management
S2 – IT Security
Practices
S3 – Cybersecurity
Workshop
S – track
Info Security
ISO 27001

15. Information
Business Process
Services
Infrastructure
Applications IT
Security
Enterprise
Information
Security
© Copyright ICTC.EU 2017
15

16. Strategy and architecture
Solution development and implementation
Service management
Procurement and Management
Client interface
Business change

17. G – track
IT Governance
M – track
IT Management
B – track
Business Agility
Lectured tracks and modules
A – track
Activating skills
© 2014 ictc.eu
WednesdayThursday MondayTuesday
S – track
Info Security
Monday
Strategy and architecture
Solution development and implementation
Service management
Procurement and Management
Client interface
Business change

18. Technical Generic Management
Source: Georges Ataya
18
Skills requirements for Cyber Security domains
© 2018 Georges Ataya

19. CIONET
International CIO association
Advisory Board membership,
partnership with ISACA and
partnership with Solvay Brussels
School’s IT Management
education.
.
.
Partnership
Various organizations partner with Professor Georges Ataya and participate in enriching the
Executive and Master education through their publications and involvements.
ISACA
Research Foundation
Sponsorship
agreement signed in
2007
Belgian Coalition
Cybersecurity
Agoria
federation
Membership of ICT
Control SA delivery of
Business field projects.
Co-fondation, Board
membership, Chairmanship of
Sharing sessions
organisation.

20. Board membership

23. Program in European Data Protection
Started in 2016 as a research project with the ITMA asbl core
team and the Belgian Privacy commission. Positioned today as
a European leader in GDPR education. The body of knowledge
is packaged to support a professional certification based on
the ISO17024 standard.
Georges ATAYA
Solvay.edu/gdpr
Coms.Solvay.edu/gdpr-modules

24. Specialised education for
Data Protection Alumni
Extended education offered to Data Protection officers
and GDPR professionals, including the alumni of our
Program in European Data Protection. Organized in
partnership with the DPO association DPO CIRCLE.
Marketing for this new education starts in late 2018.
Specialized modules
Addressing the five domains of
knowledge delivering advanced
knowledge and expertise
Evening education
Aligned with existing offering with
highly qualified expert lecturers
Leading to Executive certification
Available expertise leads to executive
certification for DPO and GDPR
professionals

26. Pr. Georges ATAYA
Academic Director
IT Management Education
Information Security Education
Program in European Data Protection
GESTS530 Business Field Projects
GESTS483 IT Governance
SECLOUD Research director at iCITE
Solvay Brussels School of Economics and Management