Cybersecurity Strategic 
Leadership Programme


A holistic 3-module learning journey exclusively designed for cybersecurity leaders


Module 1: 8 - 12 Jun 2026  |  Module 2: 13 - 17 Jul 2026  |  Module 3: 31 Aug - 2 Sep 2026 

 

About the Programme

As we embrace the fourth industrial revolution, we can’t overlook the potential cybersecurity risks that come with the integration of transformative technologies in our daily lives.

To address this challenge, Cyber Security Agency of Singapore (CSA) has appointed SMU as the academic partner to co-design and deliver, in partnership with ISTARI, the Cybersecurity Strategic Leadership Programme (CSLP), a critical initiative under the SG Cyber Leaders programme. 

Upon completion of the programme, participants will join the most esteemed members of Singapore’s cybersecurity community, uniquely positioned to enhance the country’s profile locally and regionally.
 

Cybersecurity Strategic Leadership Programme

In partnership with

Cyber Security Agency of Singapore (CSA)

Delivered by

SMU Executive Development
ISTARI
David Koh, Commissioner of Cybersecurity,  Chief Executive, Cyber Security Agency of Singapore

Chief Executive’s Foreword

Cybersecurity is an important growth sector in Singapore’s economy and digital future. As organisations digitalise further and cyber threats continue to grow in scale and sophistication, there is a growing need to strengthen the cybersecurity workforce by identifying and training individuals to lead cybersecurity functions in organisations. 

 

The programme aims to strengthen local cybersecurity leaders’ strategic and leadership capabilities to influence strategy, drive organisational cybersecurity posture and resolve cybersecurity challenges through innovation and partnerships."

David Koh 
Commissioner of Cybersecurity, 
Chief Executive, Cyber Security Agency of Singapore

Learning Outcomes

The programme aims to develop a pool of exceptional cybersecurity leaders who can lead confidently in environments shaped by advanced persistent threats (APTs), geopolitical volatility, and systemic interdependence — and position cyber resilience as a strategic business imperative within their organisations and ecosystems. 

By the end of the programme, participants will be able to:

  • Demonstrate the leadership mindset, strategic maturity, and resilience posture required to operate effectively under persistent threat conditions and long-term adversarial pressure.
  • Navigate complex power dynamics, governance tensions, and regulatory constraints as a trusted and influential strategic leader within the organisation.
  • Articulate and execute a coherent cyber resilience strategy, aligned to enterprise priorities and grounded in the Anticipate–Withstand–Respond–Adapt routines.
  • Anticipate adversarial intent and systemic risk, integrating geopolitical, technological, and ecosystem signals into forward-looking decision-making.
  • Frame, assess, and quantify strategic cyber risk to inform board-level governance, accountability, and investment allocation decisions.
  • Lead decisively under pressure during cyber crises, balancing transparency, operational integrity, regulatory expectations, and reputational recovery.
  • Mobilise cross-functional stakeholders and external partners, strengthening collective resilience across organisational and national ecosystems.
  • Embed resilience-by-routine into culture, strategy, organisational design, and governance, ensuring that cyber capability evolves stronger after disruption.

Programme Experience

The programme consists of: 

Leadership Mindset Cybersecurity Assessment

Leadership Mindset Assessment
Pre-work

Singapore

8 days in Singapore 
In-person Sessions
(SMU City Campus)

Cambridge, London, UK

5 days of Overseas Immersion 
In-person Sessions at
Cambridge & London, UK 
(University of Cambridge)+

Cybersecurity Impact Assessment

Impact Assessment
Virtual Session

4:30pm – 5:30pm | 21 May 2026
Virtual Session

8 – 12 June 2026 (5 days)
Singapore | In-person Sessions

  • Lead with systems awareness in persistent-threat environments beyond technical control and compliance reflexes.
  • Navigate governance, accountability and legal tensions with disciplined executive judgement.
  • Influence across power structures and mobilise coalitions without relying on formal authority.
  • Communicate cyber risk credibly to Boards, regulators and the public under scrutiny.
  • Build high-performance cyber teams grounded in psychological safety and shared accountability.
  • Strengthen long-term cyber capability through intentional talent development and action learning.

13 – 17 July 2026 (5 days)
Cambridge & London, UK | In-person Sessions+

All participants to arrive in Cambridge on 12 July for pre-programme activities (e.g. Campus Tour, Welcome Reception) in the afternoon.

+Participants are required to make necessary arrangements to accommodate travel time in addition to the scheduled programme dates above.

  • Examine geopolitical and technological shifts reshaping enterprise cyber risk in an era of “unpeace”.
  • Apply the Resilience-by-Routine framework to anticipate, withstand, respond and adapt systematically.
  • Craft and communicate a coherent cyber resilience strategy aligned with board priorities.
  • Strengthen governance, culture and organisational design as force multipliers of resilience.
  • Engage with global CISOs and innovators to observe resilience leadership in practice.
  • Assess the strategic implications of AI and emerging technologies on future cyber leadership.

Accommodation: As it is travel peak in the UK during the immersion week (12 – 17 July 2026), SMU will support participants by making accommodation arrangement to ensure a seamless and hassle-free experience.

Participants will stay with our designated hotel partners for a total of 5 nights, at a cost of SGD 2,600 (excluding 9% GST) per participant. The package includes:

  • Cambridge: 4 nights at a 4- or 5-star hotel (single occupancy, breakfast included)
  • London: 1 night at a 4- or 5-star hotel (single occupancy, breakfast included)

Kindly note that any accommodation extension beyond the official programme period shall be arranged and borne by the participant.

31 August – 2 September 2026 (3 days)
Singapore | In-person Sessions

  • Lead decisively in a live cyber wargame, making split-second choices under AI-driven threats.
  • Engage confidently with Boards and regulators in moments of crisis and public scrutiny.
  • Confront post-crisis accountability and reputational recovery with strategic clarity.
  • Integrate national-level perspectives into enterprise cyber leadership decisions.
  • Translate insights into action through Action Learning Project refinement and executive pitching.
  • Commit to sustained leadership impact as part of a trusted cyber leadership community.

Who Should Attend

The programme is designed for senior and middle management leaders (C and C-1 levels) of local and regional organisations with substantive cybersecurity responsibility in their roles. 

Aspiring and upcoming cybersecurity leaders and senior managers are also welcome to apply. 
 

Programme Fees1

SGD 26,500 (Excluding 9% GST2)
SGD 28,885 (Including 9% GST3)
 

1The programme fee is exclusive of any travel, airport transfer, and accommodation costs throughout the programme, which will be borne by the participants or the sponsoring organisations.

2GST not applicable for foreign-based entities.  

3GST applies to self-nominated participants and participants sponsored by Singapore-registered organisations.

 

Subsidy Support

Eligible participants (Singaporeans only) may receive a subsidy of up to 70% of the programme fee from CSA.
 

Why Attend the Programme?

The Cybersecurity Strategic Leadership Programme is the ultimate catalyst that helps you shift your mindset, attitudes, and skills towards making cybersecurity an integral part of your organisation’s strategy. 
 

360° perspective on cybersecurity ecosystem

Get a holistic 360° perspective on the cybersecurity ecosystem
The unparalleled programme blends deep insights from academics, thought leaders, industry practitioners, and government officials. You will gain a holistic 360° perspective view on the cybersecurity ecosystem that consists of a complex network of people, processes, technologies, and rules working together to protect digital environments.  
 

Lead self, teams, and organisation in cybersecurity

Emerge with a deep understanding of how to lead yourself, your teams, and your organisation in cybersecurity
The cybersecurity environment is characterised by constant evolution, complexity, uncertainty, regulatory ambiguity and high-stakes decision-making. You will learn how to lead and operate under pressure and uncertainty, to translate cyber risk into strategic, board-level and policy-relevant decisions. 
 

Experiential, hands-on learning activities

Immerse in experiential, hands-on learning activities
Throughout the programme, you will immerse in experiential, hands-on activities that translate each module’s learning into strategic, actionable insights that enable you to create tangible and measurable business value from cybersecurity within your organisation.
 

Live case studies and simulation on cybersecurity

Experience live case studies and simulations
Through role-based scenarios, evolving information, and competing stakeholder demands, our live case studies and simulation stimulate safe experimentation with new behaviours, initiatives and ideas, where you can sharpen your judgement and practise leading without full certainty. 
 

Join our vibrant SMU Associate Alumni community network

Be part of our vibrant SMU Associate Alumni community*
At the end of the programme, you will get to join our SMU Associate Alumni Community. You will get to maintain a lifelong connection and affiliation with the University, and form long-term professional networks with fellow Associate Alumni from across ASEAN, broader Asia, and beyond. 
*Automatically onboarded as an SMU Associate Alumnus upon successful completion of the programme. 

Programme Testimonials

Programme Directors

François Bogacz, Head of Learning and Innovation, SMU Executive Development, SMU

François Bogacz

SMU Executive Development

François is the Head of Learning and Innovation at SMU Executive Development, where he designs high-impact executive programmes. He has a deep hands-on knowledge of the challenges of the IT industry leaders, having spent the first part of his life in management positions at Philips, Hitachi and Microsoft. 

With over 25 years of experience in global companies and start-ups, François has an extensive background in engineering, IT and management. He has been a key figure in helping senior leaders build C-suite mindsets for cybersecurity strategy, risk management, and digital transformation. He is also the Chair of the Skills and Credentials Working Group at the Digital Education Council. 

François Bogacz, Head of Learning and Innovation, SMU Executive Development, SMU

Jason Mallinder

ISTARI

Jason is a Client Partner at ISTARI and is Global Head of its Academy.  He fosters long-term trusted client relationships by integrating advisory, education, and ecosystem capabilities into cohesive, high-impact outcomes that build true cyber resilience for clients. 

Jason brings deep practitioner expertise to his role, having served as Global CISO and Managing Director at Credit Suisse. His experience extends into the public-private sector, where he has worked alongside the Bank of England and the UK government to develop national cyber defence frameworks. Jason is a certified manager in both information security and risk, with a proven track record of leading large-scale technology risk operations on a global stage.

Registration

Interested candidates are required to submit an online application by completing the registration form by 31 March 2026.

Required Documents

  • Nomination / Referral form downloadable here.
  • A copy of your CV / resume
  • Organisation Chart or reporting structure reflecting your direct supervisor and subordinates

Programme Certificates

Upon completion, eligible participants from the Cybersecurity Strategic Leadership Programme will receive:

A Certificate of Completion 
from SMU Executive Development

A Certificate of Achievement
from the Cambridge Judge Business School Executive Education

*SMU Associate Alumni

Individuals who have successfully completed and obtained a certificate from SMU Executive Development (ExD)’s Cybersecurity Strategic Leadership Programme will automatically be recognised as SMU Associate Alumni.

SMU will collect, use, and disclose participants’ personal data, as provided in the programme records, for the following purposes, in accordance with the Personal Data Protection Act 2012 and SMU’s data protection policy:
(i) to join as an SMU Associate Alumnus;
(ii) to update my personal data in SMU’s associate alumni database to receive communications on associate alumni-related news, events, services and such other communications that may be beneficial to an SMU Associate Alumnus.

If you have chosen to receive additional marketing communications via text messages and/or voice calls, please take note that your consent herein shall override your withdrawal of consent in the government Do Not Call (DNC) Registry.

You may withdraw your consent for the collection, use and disclosure of your personal data for the Purpose, at any point in time, by sending your request to alumni@smu.edu.sg. However, please note that this may affect our administration of the above purposes to you. Your withdrawal will be effective within thirty (30) days of such a request.

Cybersecurity Strategic Leadership Programme Alumni
Contact SMU Executive Development

Contact Us

For enquiries, please reach out to:

Mr Desmond Ng
+65 6808 5393
desmondngjj@smu.edu.sg

Mr Vincent Lu
+65 6828 9605
vincentlu@smu.edu.sg