Skip to content

FAQs

The next CISO Executive Certification Program will be offered from May 20th – July 26th, 2024.

Studies have shown a large deficit in qualified cybersecurity professionals globally.  There are also shortages in experienced CISO’s that understand cybersecurity operations from a holistic perspective.  A large number of CISO’s traditionally are promoted internally from IT organizations and while they may have technical competency, they are typically placed into CISO roles without an understanding of broader business requirements to meet and brief Board of Directors, senior executives (CEO, CFO, etc.), how to develop and implement strategic plans, how to perform and excel in risk management and compliance efforts, how to identify and manage budgets, mentor and lead teams, communicating effectively to the board, external constituents, and more. This lack of knowledge impacts the CISO’s ability to provide the most optimal advice and guidance to the organization and may lead to risk impact without appropriate training and education.

The US Securities and Exchange Commission (SEC) has implemented Rules on Cybersecurity Risk Management, Strategy, Governance and Incident Disclosure by Public Companies.

 

The rules will require registrants to disclose on the new Item 1.05 of Form 8-K any cybersecurity incident they determine to be material and to describe the material aspects of the incident’s nature, scope, and timing, as well as its material impact or reasonably likely material impact on the registrant. An Item 1.05 Form 8-K will generally be due four business days after a registrant determines that a cybersecurity incident is material. The disclosure may be delayed if the United States Attorney General determines that immediate disclosure would pose a substantial risk to national security or public safety and notifies the Commission of such determination in writing. The new rules also add Regulation S-K Item 106, which will require registrants to describe their processes, if any, for assessing, identifying, and managing material risks from cybersecurity threats, as well as the material effects or reasonably likely material effects of risks from cybersecurity threats and previous cybersecurity incidents. Item 106 will also require registrants to describe the board of directors’ oversight of risks from cybersecurity threats and management’s role and expertise in assessing and managing material risks from cybersecurity threats”.

 

The CISO Executive Education Program provides this education and prepares executives, governmental officials, and directors to fulfill their roles as required by the SEC rule.

The fee for attending the program is USD $15,000 and includes admission into the CLP program and access to the course materials and platform. Tuition payment should be paid in full prior to the program start date.

Flexible payment installment plans are available. If you are interested in creating a payment plan, please email us at pratt_cybersec@duke.edu.

If you are not able to make a session due to a conflict, please let us know as soon as possible. Session recordings will be posted to the course site and would be available for review 24-48 hours after the live session.

If you can no longer attend a program, requests for withdrawing must be sent in writing to the program director and the CISO team. If you withdraw from a program more than 21 calendar days prior to the start date of the program, you will receive a 100% refund. If you withdraw from a program between 7 and 21 calendar days prior to the program, you will receive a 50% refund. If you withdraw less than 7 days prior to the program, you will forfeit the full payment amount. Refunds will be made to the party who paid the relevant program invoice. 

 

Should you not be able to participate due to factors beyond their control (e.g. visa issues, family emergency, work emergency, etc.), you may elect (pending any necessary sponsor approvals) to credit the payment towards the following program cycle. If you would not like to take advantage of the deferral policy, you may request a refund. Refunds will be made to the party who paid the relevant program invoice. 

The CISO Executive Certificate Program is now providing scholarships for a limited number of participants. These individuals will be recognized as the Paladin CISO Scholars. To qualify, please email  the following to pratt_cybersec@duke.edu: 1) a copy of your CV/Resume, and 2) a brief explanation of why you are interested in the CISO program and how this scholarship will support your professional goals (500 words max)

Meet the Duke Cyber Community

The next CISO Executive Certification Program will be offered from May 20th – July 26th, 2024.

Studies have shown a large deficit in qualified cybersecurity professionals globally.  There are also shortages in experienced CISO’s that understand cybersecurity operations from a holistic perspective.  A large number of CISO’s traditionally are promoted internally from IT organizations and while they may have technical competency, they are typically placed into CISO roles without an understanding of broader business requirements to meet and brief Board of Directors, senior executives (CEO, CFO, etc.), how to develop and implement strategic plans, how to perform and excel in risk management and compliance efforts, how to identify and manage budgets, mentor and lead teams, communicating effectively to the board, external constituents, and more. This lack of knowledge impacts the CISO’s ability to provide the most optimal advice and guidance to the organization and may lead to risk impact without appropriate training and education.

The US Securities and Exchange Commission (SEC) has implemented Rules on Cybersecurity Risk Management, Strategy, Governance and Incident Disclosure by Public Companies.

 

The rules will require registrants to disclose on the new Item 1.05 of Form 8-K any cybersecurity incident they determine to be material and to describe the material aspects of the incident’s nature, scope, and timing, as well as its material impact or reasonably likely material impact on the registrant. An Item 1.05 Form 8-K will generally be due four business days after a registrant determines that a cybersecurity incident is material. The disclosure may be delayed if the United States Attorney General determines that immediate disclosure would pose a substantial risk to national security or public safety and notifies the Commission of such determination in writing. The new rules also add Regulation S-K Item 106, which will require registrants to describe their processes, if any, for assessing, identifying, and managing material risks from cybersecurity threats, as well as the material effects or reasonably likely material effects of risks from cybersecurity threats and previous cybersecurity incidents. Item 106 will also require registrants to describe the board of directors’ oversight of risks from cybersecurity threats and management’s role and expertise in assessing and managing material risks from cybersecurity threats”.

 

The CISO Executive Education Program provides this education and prepares executives, governmental officials, and directors to fulfill their roles as required by the SEC rule.

The fee for attending the program is USD $12,000 and includes admission into the CLP program and access to the course materials and platform. Tuition payment should be paid in full prior to the program start date.

Flexible payment installment plans are available. If you are interested in creating a payment plan, please email us at pratt_cybersec@duke.edu.

If you are not able to make a session due to a conflict, please let us know as soon as possible. Session recordings will be posted to the course site and would be available for review 24-48 hours after the live session.

If you can no longer attend a program, requests for withdrawing must be sent in writing to the program director and the CISO team. If you withdraw from a program more than 21 calendar days prior to the start date of the program, you will receive a 100% refund. If you withdraw from a program between 7 and 21 calendar days prior to the program, you will receive a 50% refund. If you withdraw less than 7 days prior to the program, you will forfeit the full payment amount. Refunds will be made to the party who paid the relevant program invoice. 

 

Should you not be able to participate due to factors beyond their control (e.g. visa issues, family emergency, work emergency, etc.), you may elect (pending any necessary sponsor approvals) to credit the payment towards the following program cycle. If you would not like to take advantage of the deferral policy, you may request a refund. Refunds will be made to the party who paid the relevant program invoice. 

The CISO Executive Certificate Program is now providing scholarships for a limited number of participants. These individuals will be recognized as the Paladin CISO Scholars. To qualify, please email  the following to pratt_cybersec@duke.edu: 1) a copy of your CV/Resume, and 2) a brief explanation of why you are interested in the CISO program and how this scholarship will support your professional goals (500 words max)