Online Education
Self-paced materials for practitioners, SME teams, and boards — practical next steps after an alert or review, tailored to Hong Kong's regulatory and operating context.
Capability building, not checkbox training
HKISG education modules focus on what teams actually do: run a tabletop, brief a board, harden a launch checklist, or walk through first-hour incident steps. Content aligns with our Assessment Methodology so learning maps to review evidence.
If a module cannot name the next action, it does not ship.Education Council standard
Learning paths by audience
- Practitioners: Incident response, secure-by-design, and glossary-aligned fundamentals.
- SME owners: Short modules with owner assignments and review dates — no SOC required.
- Boards and risk committees: Briefing packs with dated one-page summaries for governance files.
- Members preparing for review: Modules that mirror rubric domains — governance, controls, detection, suppliers, evidence.
Trust and limitations
Education content is authored and reviewed by the HKISG Education Council. It supports programme goals but is not legal advice, regulatory guidance, or a substitute for formal audit opinions. Corrections follow Editorial Standards.
Education library
Courses, checklists, and briefings available in the HKISG programme.
Board Briefing Pack
Plain-language cyber risk briefing materials for directors and risk committees — heatmap templates, questions for the CISO, and KPIs that avoid vanity metrics.
CISO AI Security Briefing
A 45-minute facilitator guide for CISOs briefing Hong Kong leadership on AI security — inventory, abuse testing, PDPO touchpoints, and questions boards should ask.
Incident Response Basics
Self-paced primer for Hong Kong SME teams building first-response capability — triage, containment, evidence, and leadership communication.
Secure-by-Design Checklist
Engineering and product checklist for reducing common breach paths — threat modelling, default-deny, secrets hygiene, and abuse-case tests for Hong Kong teams.
Frequently asked questions
- Who can access education materials?
- Selected materials are public. Full library access, including member-only briefings, is available on request via contact. Materials are published in English.
- Do courses replace formal certification?
- No. HKISG education supports operational readiness and board communication. Certifications such as CISSP or CISA remain separate credentials — see our Glossary entry for context.
- How should boards use these materials?
- Start with the Board Briefing Pack for governance language, then assign technical owners to incident response and secure-by-design modules. Pair with bulletins when active threats require escalation.
- Can we use content in internal training?
- Members may use HKISG education materials for internal non-commercial training with attribution. Redistribution or resale requires written permission via contact.