What is the Certified Cybersecurity Risk Manager?

The Certified Cybersecurity Risk Manager is a globally recognised professional certification by the Global Leadership Institute (GLI), designed to equip professionals with advanced competencies in Leadership & Management.

How long does this certification take?

The programme is 9 Week and can be completed at your own pace through our self-paced online option, or alongside live virtual sessions.

Is this certification globally recognised?

Yes. GLI certifications are internationally recognised and carry CPD credits, making them valuable for career advancement worldwide.

What level is this certification?

This is a Intermediate Level certification, suitable for professionals with relevant experience or background in the field.

You can enrol by emailing info@leadership.co.ke, contacting us via WhatsApp at +254 722 223 084, or filling the enrolment form below.

Certified Cybersecurity Risk Manager (CCYRM) | Online Certification

Executive Summary

Certified Cybersecurity Risk Manager

Designed for today’s high-impact professionals, the Certified Cybersecurity Risk Manager (CCYRM) delivers a rigorous Intermediate-level curriculum that equips participants with the knowledge, tools and frameworks needed to excel in security risk management, physical protection and investigations.

This 9 Week programme is structured around ASIS, ISO and recognised security-management standards, ensuring every graduate applies internationally validated methods to real-world challenges.

GLI’s CCYRM holders are recognised by leading organisations across Africa, the Gulf, Europe and the Americas as qualified, results-driven professionals. Whether you are advancing your current career or transitioning into new responsibilities, this certification provides the competitive edge you need in 2026 and beyond.

Programme Overview

Certification at a Glance

Certification

Certified Cybersecurity Risk Manager

Acronym

CCYRM

Who Should Enrol?

Incident Response — applied to your own work
Investigation and Evidence — applied to your own work
Ethics, Privacy and Accountability — applied to your own work
Risk and Proportionate Control — applied to your own work
Insider Threat and Personnel — applied to your own work
Physical and Logical Convergence — applied to your own work

Programme Inclusions

Everything Included in Your Enrolment

All study materials and study guide
Access to GLI online learning portal
Online examination and assessment
Digital certificate and digital badge
Physical certificate (shipped to you)
CPD credits for professional bodies
GLI alumni network membership
Facilitator and tutor support
Resource downloads and reference library
Automatic enrolment confirmation

Certification Benefits

Why This Certification Matters for Your Career

Leadership Capability

Develop the strategic and operational skills to lead complex security risk management functions

Career Advancement

Accelerate your career towards senior security-management and CSO roles

Strategic Thinking

Build the strategic thinking, analysis and execution skills of world-class leaders

Organisational Impact

Design and implement security risk management systems that drive performance and measurable results

Personal Excellence

Develop emotional intelligence, resilience and authentic executive presence

Global Employability

Qualify for security risk management roles across corporates, critical infrastructure, government and protective services worldwide

Competency Framework

Core Competencies You Will Develop

✦Security Risk Assessment and Threat Analysis

✦Physical Security and Access Control

✦Investigations, Intelligence and Forensics

✦Crisis, Emergency and Incident Response

✦Security Operations, Technology and Surveillance

✦Professional Ethics and Governance

Course Curriculum

Programme Modules

Click any module to explore the detailed curriculum topics included in this certification.

Foundations and Strategic Context of Certified Cybersecurity Risk Manager

Certified Cybersecurity Risk Manager: industry context, trends and professional standards
Security principles and protective concepts
The security profession, roles and standards
The threat landscape and security environment
Security governance and management systems
Physical, personnel and information security
Deterrence, detection, delay and response
Duty of care and legal framework
Ethics and professional conduct in security
Security as a business enabler
Career pathways and professional development

Incident Response

Incident response and command
Investigation practice and evidence handling
Working with police, regulators and the justice system
Cash, assets and loss prevention
Technology adoption and integration
Convergence and unified security
Crowd, event and public space safety
Innovation in protective operations
Resilience and future threats
Sustaining improvement and benefits
Measuring security transformation impact
Professional ethics and conduct in security
Use of force and proportionality
Human rights and lawful security
Privacy, surveillance and data protection

Investigation and Evidence

Investigation practice and evidence handling
Insider threat and personnel security
Security ethics, use of force and accountability
Journey management and risk
Kidnap, ransom and extortion awareness
Workplace violence prevention
Security awareness and training
Protective operations planning
Safeguarding people and assets
Loss prevention principles
Inventory shrinkage and theft
Retail and commercial security
Fraud prevention and controls
Cash and valuables protection
Supply chain and cargo security

Ethics, Privacy and Accountability

Security ethics, use of force and accountability
Security risk assessment and proportionate response
Working with police, regulators and the justice system
Team leadership in security operations
Integrity, confidentiality and impartiality
Anti-corruption and vetting
Regulatory compliance and licensing
Security KPIs and metrics
Incident and response performance
Audits, inspections and assurance
Continuous improvement in security
Cost-effectiveness of controls
Security maturity assessment
Driving measurable security improvement
Information security fundamentals

Risk and Proportionate Control

Security risk assessment and proportionate response
Insider threat and personnel security
Security technology selection and operation
Community and tenant engagement
Managing sensitive communications
Presenting risk and recommendations
Leading security projects and change
Protecting data and information assets
Cyber-physical systems and OT security
Converged security operations
Access, identity and credential security
Insider threat and data loss prevention
Incident response across cyber and physical
Security of surveillance and access systems
Governance of converged security

Insider Threat and Personnel

Insider threat and personnel security
Access control, screening and visitor management
Investigation practice and evidence handling
Legal and ethical investigation
Incident management and response
Emergency preparedness and planning
Evacuation and life-safety procedures
Crisis management and command
Business continuity and resilience
Communication during crises
Bomb threats and suspicious items
Active-threat and hostile events
Recovery and post-incident review
Exercises, drills and testing
Personnel security and vetting

Physical and Logical Convergence

Layered defence and site protection
Security technology selection and operation
Access control, screening and visitor management
Security lighting and CPTED
Guard force deployment and patrols
Control rooms and command centres
Physical security testing and assurance
CCTV and video surveillance systems
Alarm systems and monitoring
Electronic access and biometric systems
Security systems integration
Drones, sensors and detection technology
Cybersecurity of physical systems (OT)
Data protection in surveillance
Command, control and situational awareness

Data and Intelligence

Evidence handling and chain of custody
Security intelligence collection and analysis
Security metrics and reporting
Evidence-based financial recommendations
Financial data, master data and the chart of accounts
Business intelligence and finance dashboards
Data analytics and predictive finance
Cybersecurity and financial data protection
Audit evidence, sampling and testing
Audit evidence, sampling and professional scepticism
Governance and compliance KPIs
Analytical techniques and bias
Preparing financial statements
Interpreting financial statements
Data modelling and database design

Planning and Design

Designing a security programme or solution
Physical security design and layered defence
Security programme design and budgeting
Advance work and route planning
Emergency evacuation planning
Instructional design models (ADDIE, SAM)
Forecasting and planning (FP&A)
Enterprise resource planning (ERP) and finance systems
Measuring programme success
Leading project teams
Management accounts and dashboards
Mine planning and methods: surface and underground
Budget vs actual and variance
Cost and profitability analysis
Media planning and buying

People Risk

Insider threat management
Employee engagement models and drivers
The employee lifecycle and HR value chain
NGO financial management and budget-versus-actual discipline
The customer experience (CX) discipline
Employee experience and engagement
Customer and employee satisfaction
Financial modelling and forecasting discipline
Discipline, conduct and fair-process management
Applicant tracking systems and recruitment analytics
Digital HR and the employee experience platform
Employee and manager self-service
Employee relations, discipline and fair process
Employee engagement and what actually drives it
Operational planning and execution discipline

Audit and Standards

Audit and compliance checks
Integration with quality and environment
Certification and continual improvement
Design review and quality
Process improvement and lean thinking
Quality management and standards
Productivity and efficiency improvement
Professional standards and ethics (CIPS)
Supplier development and improvement
Data quality and master data management
Sustainable procurement principles and standards
Standard costing and variance analysis
Continuous improvement of finance processes
Expected credit loss and portfolio quality
Applying reporting standards and accounting judgement

Health and Safety

Influencing and safety leadership
Wellbeing and holistic health strategy
Confidentiality and health data
Driving measurable safety improvement
Designing a safety programme or control
Job safety analysis (JSA) and task risk
Forecasting and planning
Contractor and visitor safety
Predictive safety analytics
Automation and safety technology
Toolbox talks and safety communication
Brand health and measurement
Regulatory compliance and biosafety
Safety management systems (ISO 45001)
Safety management systems overview (ISO 45001)

International Context

Travel risk management
Decision support and insight
Cross-border data and transfers
Cost, feasibility and control analysis
Leading security teams
Threat and risk assessment for principals
Communications and coordination
Coordination with teams and agencies
Stakeholder mapping and liaison
Threat and risk assessment
Brand, reputation and communications
Communicating financial results

Change and Modernisation

The finance function and digital transformation
Regulatory change management
Psychodynamic and psychoanalytic approaches
Attachment and developmental theory
Digital transformation and IT strategy
Variations, claims and delay: managing change on site
Change talk and readiness
Habit change and behaviour design
Change control and configuration
Organisational change management
Change and adoption in projects
Digital and self-service transformation
Measuring CX transformation impact
Digital transformation in banking
Foreign exchange and treasury operations

Service and Public Interface

Customer data platforms and segmentation
Customer experience and journey mapping
Cross-functional collaboration with product and service
Media and public communication
Facilitation, training and public presentation skills
Digital advisory, e-extension and mobile services
Advisory service design and delivery
Customer service and experience principles
Customer expectations and satisfaction
Ethics and fair customer treatment
Service culture and brand promise
CRM systems and customer data
Service analytics and dashboards
Customer service technology stack
Social media customer care

Records and Procedure

Information lifecycle and records management
Knowledge management and capability building
Incident reporting and record-keeping
Vehicle documentation, compliance and consumer protection
Health records, data and confidentiality
Record-keeping and data protection
Data, records and confidentiality tech
Lessons learned and knowledge management
Professional documentation and presentation
Process and control documentation
Tender planning and documentation

Strategy and Governance

Board and management reporting
Vision, mission and strategic intent
Competitive strategy and positioning
Setting strategic priorities and choices
Aligning teams around strategy
Strategy execution and the balanced scorecard
Strategic decision-making under uncertainty
Measuring strategic progress
Decision rights and governance
Turning strategy into results
Procurement’s contribution to organisational strategy
Product and portfolio strategy
Go-to-market and channel strategy
Brand and reputation as strategic assets
Growth strategy and demand generation

Contractors and Supply

Visitor and contractor management
Guard force and contractor management
Vendor and technology management
The procurement cycle and operating models
Public versus private procurement
Supply markets and the enabling environment
Digital procurement and the future of the profession
Fair trade and responsible supply
Procurement and asset management under donor rules
Vendor, venue and supplier contracting for events
Water supply systems: sources, treatment and distribution
Supply analysis, gaps and scenario planning
Vendor management and system governance
Procurement and supply chain: scope and value
Professional roles, boundaries and settings

Security Practice

Security operations management
Security culture and awareness
Aligning security with business goals
Legal and ethical protection
Guard force management and supervision
Influencing and security awareness
Access control systems and identity management
Investigation principles and process
Digital forensics and cybercrime
Fraud and internal-threat investigation
Investigations and recovery
Cybersecurity governance
Ethical principles and codes of practice
Claims investigation and fraud indicators
Insurance regulation and consumer protection

Risk and Resilience

Likelihood, impact and risk rating
Risk treatment and countermeasures
Intelligence-led risk assessment
Risk registers and reporting
Continuous risk monitoring
How insurance works: risk pooling and the value chain
Underwriting principles and risk selection
Duty of care and risk management
Managing risk and difficult cases
Ethical, risk and feasibility considerations
Wellbeing and resilience coaching
Implementation planning and risk management
Handling vulnerable customers
Business case and impact assessment
Enterprise risk management in banks

Legal and Regulatory

Working with law enforcement and regulators
Legal and other requirements
Compliance monitoring and enforcement
Data-informed and evidence-based decisions
Contract governance and compliance
Comparable sales analysis and market evidence
Real estate regulation, licensing and professional conduct
Grant compliance and restricted funding management
Regulation of transport: authorities, conventions and licensing
Tariffs, regulation and the economics of essential services
Regulation, ethics and misinformation in media and telecoms
Evidence-based improvement
Evidence-based practice
Managing boundaries and dual relationships
Evidence-based practice and research literacy

Operations and Supervision

Technology selection and deployment
Principles of credit and the lending process
Automation, RPA and straight-through processing
Process modelling and mapping
Competitive bidding processes
Business process mapping
The HR function: roles, operating models and value creation
Financial regulation and prudential supervision
Process automation and workflow
The HR operating model and business partnering
Productivity, collaboration and workflow tools
Solvency, capital and prudential supervision
The vehicle sales process from enquiry to delivery
In-process quality control and inspection
Peer support and consultation

Security Technology

Equipment and technology
Data collection and analytics
Digital permits and inspections
Sustaining ethical, effective practice
Bancassurance and digital insurance models
Telehealth and digital care delivery
Data visualisation for finance
Legal responsibilities and professional bodies
Practice management systems
Ethics of technology in practice
Project data, reporting and analytics
Cloud finance and system integration
Digital finance, mobile money and payment operations
Data governance frameworks and roles
Data privacy law and compliance (GDPR)

Emergency and Incident

Risk response and contingency
Crisis communications
Client feedback and satisfaction
Lessons learned and development
Emergency preparedness and response planning
Risk, compliance and feasibility analysis
Credit analysis and the 5 Cs of credit
Financial statement and cash-flow analysis
Stress testing and scenario analysis
Customer segmentation and needs analysis
Sales performance and pipeline management
Designing and facilitating groups
Psychoeducation and workshops

Personnel and Capability

Team leadership in banking operations
Training needs analysis
Career and talent development
Capability and skills frameworks
Maturity and capability assessment
Training needs analysis and learning strategy
Strategic workforce planning and demand forecasting
Succession planning and talent pipelines
Talent sourcing channels and pipelines
High-potential identification and talent reviews
Workforce reporting and storytelling with data
Team development and effectiveness
Coaching and developing team members
Managing virtual and cross-cultural teams
Building high-performing project teams

Ethics and Conduct

Ethical frameworks and codes of practice
Complaints, accountability and fitness to practise
Driving effective, ethical outcomes
Accountability and follow-through
Professional ethics and responsibility (PMI)
Professional standards and ethics
Marketing and sales ethics
Working with organisations on wellbeing
Designing an intervention or programme
Roles, standards and professional conduct
Professional ethics in customer service
Professional ethics and duty of care
Professional case study and presentation
Ethical decision-making under pressure
Setting goals, roles and accountability

Leadership and Command

Report writing and case management
Locks, keys and credential management
Front-office and reception management
Relationship management and retention
Performance management in service
Handling escalations as a leader
Team leadership in customer service
Teller operations, cash handling and vault management
Operational efficiency and channel management
Reconciliation and nostro/vostro management
Sanctions screening and PEP management
Make, buy or ally: boundary decisions
Property management and facility operations
Programme cycle management in NGOs
Reinsurance and capacity management

Communication and Reporting

Professional report writing
Communicating vision and telling stories
Executive communication and presence
Cross-cultural communication
Sustainability reporting and disclosure
Proposal development and donor reporting
The media and telecommunications landscape
Risk assessment and safety planning
Financial reporting frameworks (IFRS/GAAP)
Integrated and sustainability reporting
Reporting quality and governance
Reporting and dashboards
Integrated marketing communications
Dashboards and performance reporting
Professional presentation and pitching

Stakeholders and Liaison

Stakeholder engagement strategy
Partnering and co-creation with customers
Negotiation with clients and partners
Goal setting and contracting
Partnership building and multi-stakeholder platforms
Corporate social responsibility and community impact
Regulatory compliance and market requirements
Group dynamics, facilitation and community mobilisation
Regulatory and fair-treatment obligations
Stakeholder mapping and collaboration
Managing difficult stakeholders
Regulatory duty and accountability
Regulatory compliance and central-bank rules
Regulatory reporting and audits
Regulatory liquidity ratios (LCR, NSFR)

Cost, Assets and Loss

Meaning, purpose and values
Earned value and forecasting
Cost-benefit and investment appraisal
Project budgeting and financial control
Funding, cash flow and financing
Value and benefits management
Financial risk in projects
Value engineering and optimisation
Realising and measuring project value
Cost estimation and budgeting
Earned value management
Marketing planning and budgeting
Marketing and sales: scope, roles and value
Value-based and dynamic pricing
Commercial negotiation and value capture

Learning Outcomes

What You Will Achieve

Incident Response — applied to your own work
Investigation and Evidence — applied to your own work
Ethics, Privacy and Accountability — applied to your own work
Risk and Proportionate Control — applied to your own work
Insider Threat and Personnel — applied to your own work
Physical and Logical Convergence — applied to your own work

Enrolment Process

How to Get Certified

🎯

Step 1: Choose Your Certification

You are viewing Certified Cybersecurity Risk Manager — one of GLI's 1,990+ globally recognised professional certifications.

💳

Step 2: Enrol & Pay Online — Instantly

Click Enrol & Study Online to register and pay securely via Paystack, Visa, Mastercard, M-Pesa or bank transfer. Access is granted the moment payment is confirmed.

📚

Step 3: Study in the GLI Learning Portal

Work through 30 structured modules and 150 lessons at your own pace, with downloadable resources and expert-designed content — all inside the LMS.

🎓

Step 4: Pass, Get Certified & Verified

Sit your final examination online, earn your certificate instantly, and receive a globally verifiable Certificate ID — plus GLI Alumni Network access.

🎓 Enrol & Study Online — Instant Access

Secure checkout · Instant LMS access · Globally verifiable certificate

Frequently Asked Questions

Common Questions

What is the CCYRM certification?

Yes. GLI certifications are recognised across 100+ countries and are aligned with ASIS, ISO and recognised security-management standards. Graduates receive a digital certificate, a physical certificate and CPD credits recognised by employers worldwide.

Who should enrol in the CCYRM?

This certification is ideal for Security Officers and Supervisors, Security Managers and Consultants, Investigators and Intelligence Analysts and Loss Prevention and Protection Specialists, and other professionals seeking to formalise their expertise in security risk management, physical protection and investigations with a globally recognised credential.

How long does the CCYRM certification take to complete?

The programme is structured over 9 Week and offers flexible learning modes. Self-paced learners can progress at their own schedule, while live virtual participants follow a structured cohort schedule with facilitator-led sessions.

Is the CCYRM internationally recognised?

What is the cost of the CCYRM certification?

The Certified Cybersecurity Risk Manager is offered in two formats: Self-Paced at USD 349 and Live Virtual at USD 549. Corporate group rates are available for organisations enrolling 5 or more participants. Contact GLI for a bespoke corporate training quotation.

What does the CCYRM certification include?

Enrolment includes all study materials and study guides, access to GLI's online learning portal, online examination, digital certificate and badge, physical certificate (posted), CPD credits, GLI alumni network membership, and ongoing facilitator support.

What is the assessment format for the CCYRM?

The Certified Cybersecurity Risk Manager is assessed through an online examination consisting of multiple-choice questions, case study analysis, and practical application assignments. The assessment is designed to evaluate real-world competency, not just theoretical recall.

What CPD credits do I earn from the CCYRM?

The Certified Cybersecurity Risk Manager carries Continuing Professional Development (CPD) credits, which can be applied towards professional body requirements including recognised international professional associations.

Can I study the CCYRM while working full-time?

Absolutely. The self-paced option is designed for busy working professionals and allows you to study when and where it suits you. Live virtual sessions are typically scheduled in the evenings or on weekends to accommodate professional commitments.

What career outcomes can I expect from the CCYRM?

Graduates progress towards senior security-management and CSO roles. The CCYRM strengthens your expertise in security risk management, physical protection and investigations and positions you for advancement across corporates, critical infrastructure, government and protective services.

Certified Cybersecurity Risk Manager

Certified Cybersecurity Risk Manager

Certification at a Glance

Who Should Enrol?

Everything Included in Your Enrolment

Why This Certification Matters for Your Career

Core Competencies You Will Develop

Programme Modules

What You Will Achieve

How to Get Certified

Common Questions

What Our Alumni Say

You May Also Like

Certified Freight Risk Manager

Certified Compliance Management Specialist

Certified Time Management Professional

Certified SACCO Management Professional

Certified Compliance and Regulatory Affairs Manager

Certified Risk Management Professional