CISO Technical Programme: Advanced Persistent Threat Detection and Response

[TGS-2026066299] Build the leadership and technical capability to detect, contain and recover from Advanced Persistent Threats across enterprise and cloud environments.

Advanced Persistent Threats are among the most complex incidents a security leader can face, often unfolding over weeks across identity systems, cloud platforms and enterprise networks. Detection engineering, frameworks such as MITRE ATT&CK and AI-assisted analysis now give security leaders the means to identify these campaigns earlier and direct a coordinated response from first alert to regulatory reporting.

Developed in collaboration with the Cyber Security Agency of Singapore (CSA), this course is structured around five core topics: governing under threat, understanding and detecting APTs, leading incident response, enterprise and cloud threat response, and an end-to-end capstone simulation. Learner will work with real log data, breach scenarios and AI-assisted tools, with each topic grounded in Singapore's regulatory environment, including the Cybersecurity Act.

Learning is delivered in person at SIT Punggol Campus over five days, combining instructor-led sessions, hands-on labs and team-based exercises.

Skills you’ll gain

Cybersecurity

Information Security

Networking and Security

Leadership and Communication

VIEW ALL SKILLS

Who Should Attend

Chief Information Security Officers (CISOs)

Chief Information Officers (CIOs)

Equivalent senior cybersecurity executives responsible for security operations, governance or risk management

Minimum Entry Requirements

Currently practising as a CISO, CIO or equivalent senior cybersecurity executive
Prior experience in cybersecurity operations, governance and/or risk management
Familiarity with core cybersecurity concepts
A minimum of 5 years' professional experience in a cybersecurity leadership role is recommended

No formal academic qualification is required. This is an advanced-level course and is not suitable for entry-level or intermediate practitioners.

Learning Outcomes

By the end of this course, learners will be able to:

Quantify APT risk in business terms to justify and prioritise security investment decisions
Map Singapore regulatory requirements including the Cybersecurity Act, to concrete incident response obligations
Apply AI-assisted governance tools to identify policy gaps and strengthen controls without over-relying on automation
Trace the full APT attack lifecycle and map attacker techniques to detection opportunities using MITRE ATT&CK as an operational reference
Close telemetry and logging gaps by identifying where attackers can operate undetected and designing targeted detection use cases
Evaluate AI-assisted detection approaches against traditional SIEM methods and assess where each adds value
Execute structured incident response processes under time and information constraints, avoiding common decision-making failures
Coordinate cross-functional response efforts across technical, legal, communications and executive stakeholders with clarity and accountability
Apply AI tools to incident triage to generate response recommendations and maintain situational awareness throughout an active incident
Investigate Active Directory compromise scenarios including identity-based attacks, Kerberos abuse and lateral movement through enterprise networks
Analyse cloud-based incidents involving misconfiguration exploitation, logging gaps and data exfiltration attempts across hybrid environments
Design AI-enhanced SOC workflows and automation pipelines that improve detection speed and analyst decision-making
Lead all phases of a major cyber incident, from detection and escalation through impact assessment, crisis communication and recovery, balancing technical, operational and regulatory demands
Make and justify high-stakes decisions in real time under ambiguity, incomplete information and evolving threats
Produce a structured executive incident report covering timeline, root cause analysis, regulatory compliance considerations and lessons learned