Chief Information Officer: Cybersecurity

The purpose of this qualification is to prepare a learner to operate as a Chief Information Officer: Cybersecurity. A Chief Information Officer: Cybersecurity ensures the effective and holistic management of the risks, threats and resiliency of cybersecurity within an organisation. This could include information security, fraud and physical security. They are accountable to build cybersecurity vigilance and resiliency across the operations, leveraging best in class capabilities and processes relating to threat analysis, threat intelligence, protection tools and subject matter expertise. The Chief Information Officer: Cybersecurity is accountable for protecting the organisations, its customers and its employees, as well as society at large, from the negative effects of cyber-crime and fraud. A competent learner will demonstrate among others the following key attributes: complex thinking, deft communication, diplomacy, executive leadership, strategic orientation, critical thinking, emotional intelligence, analytical skills. A qualified learner will be able to: • Oversee the cybersecurity function; and • Lead the provision of secure Information Technology systems.

There is a shortage of cybersecurity professionals, particularly for positions in governments, which create high levels of risk. Current Information Technology professionals may not be fully trained in information security tactics, strategy and leadership. They help develop new ways to combat cyber threats, and are the main line of defence against spamming, phishing, malware, viruses, and other information security threats. As cyber-attacks have increased, so has the demand for trained professionals to prevent and counter such attacks. Organisations rely more heavily on technology to help manage their daily lives, as such the threat of cyber-crime continues to escalate. Economies lose billions of dollars and, governments are threatened by the risks posed by nefarious attacks on the key digital systems. In recent years, large-scale cyber-attacks have affected major companies. Data breaches compromise personal information, bank records, credit card numbers and other private information, including usernames, passwords, emails, phone numbers and addresses. Information Technology professionals shall hone their skills through this cybersecurity qualification and benefit the organisations. It shall enable learners to devise strategies and methods to prevent and counter cyber-attacks on both public and private organisations, thus saving millions of revenues in potential loss of trust from clients and service provision. Typical learners for the qualification are those who are employed as Cybersecurity practitioners wishing to advance to managerial and leadership roles in cybersecurity. This qualification will enable cybersecurity officials to progress to specialist roles, middle and senior management levels. The holders of qualification do not require professional registration to practice. The qualification also provides a unique tool to facilitate appropriate recognition of learning gained over time. It will promote high standards of safety within the digital economy, as part of the national development plan. This qualification supports the economic development needs of society. The qualification was developed in collaboration with the Information and Communication Technology Sector, central and commercial banking sectors.

Recognition of Prior Learning: • Learners will gain access to the qualification through RPL for Access as provided for in the QCTO RPL Policy. RPL for access is conducted by accredited education institution, skills development provider or workplace accredited to offer that specific qualification/part qualification. • Learners who have acquired competencies of the modules of a qualification or part qualification will be credited for modules through RPL. RPL for access to the external integrated summative assessment: Accredited providers and approved workplaces must apply the internal assessment criteria specified in the related curriculum document to establish and confirm prior learning. Accredited providers and workplaces must confirm prior learning by issuing a statement of result. Entry Requirements: • NQF Level 6 qualification in Information Technology, Computer Science or Cybersecurity.

• Oversee the cybersecurity function within the ethical, legal and professional context.
• Lead the provision of secure Information Technology systems using a range of enquiry methods.